Open-Realty CMS 2.5.8 (2.x.x) <= "select_users_template" Local File Inclusion Vulnerability

OVERVIEW Open-Realty 2.5.8 and lower versions are vulnerable to Local File Inclusion. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Open Realty 'select_users_template' Parameter Local File Include Vulnerability

Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts in the context of the webserver process. This may allo...

Open Realty 'select_users_template' Parameter Local File Include Vulnerability

Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Open-Realty 2.5.8 Local File Inclusion

OVERVIEW Open-Realty 2.5.8 and lower versions are vulnerable to Local File Inclusion. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Open-Realty 2.5.8 Local File Inclusion

Exploit for php platform in category web applications 1. OVERVIEW Open-Realty 2.5.8 and lower versions are vulnerable to Local File Inclusion. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web...

Open Realty 2.5.x - select_users_template Local File Inclusion

Open Realty 2.5.x - selectuserstemplate Local File Inclusion source: https://www.securityfocus.com/bid/52296/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially...

Open Realty 2.5.x - 'select_users_template' Local File Inclusion

source: https://www.securityfocus.com/bid/52296/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts i...

EMO Realty Manager 'cat1' Parameter SQL Injection Vulnerability

EMO Realty Manager Software is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-5006

SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter...

CVE-2010-5006

SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter...

Sql injection

SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter...

CVE-2010-5006

SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter...

CVE-2010-5006

CVE-2010-5006 affects EMO Realty Manager, specifically the googlemap/index.php component. The issue is a SQL injection in the cat1 parameter that allows remote arbitrary SQL execution. This is documented by multiple connected sources (OpenVAS description and NVD entry). The provided documents do ...

PT-2011-1941

Name of the Vulnerable Software and Affected Versions EMO Realty Manager affected versions not specified Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved via the cat1 parameter in the "googlemap/index.php" endpoint...

CVE-2010-5006: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter...

CVE-2011-3765

Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade115.inc.php and certain other files...

Open redirect

Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade115.inc.php and certain other files...

CVE-2011-3765

Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade115.inc.php and certain other files...

CVE-2011-3765

Open-Realty 2.5.8 is affected by CVE-2011-3765, which enables remote attackers to disclose sensitive information by requesting certain PHP files directly. The vulnerability manifests as error messages revealing installation paths (e.g., install/versions/upgrade_115.inc.php and related files), fac...

PT-2011-4655

Name of the Vulnerable Software and Affected Versions Open-Realty version 2.5.8 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing specific files, such as install/versions/upgrade 115.inc.php, which...