CVE-2011-3765: Exposure of Sensitive Information to an Unauthorized Actor

Open-Realty 2.5.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by install/versions/upgrade115.inc.php and certain other files...

Joomla EZ Realty 5.3.0 Blind SQL Injection

. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...

Realty Listing System SQL Injection

Exploit Title:Realty Listing System sql Injection Vulnerability Date: 8/7/2011 Author: Angel Injection home Page: http://www.club-h.co.cc Email: Angel-InjectionathotmailDotcom Vendor or Software Link: http://www.realtylistingsystem.com/ Version: N/A Category:: webapps Google dork:intext:"Website...

Realty Listing System sql Injection Vulnerability

Exploit for php platform in category web applications Exploit Title:Realty Listing System sql Injection Vulnerability Date: 8/7/2011 Author: Angel Injection home Page: http://www.club-h.co.cc Email: Angel-InjectionathotmailDotcom Vendor or Software Link: http://www.realtylistingsystem.com/ Versio...

Open-Realty 3.1.5 Cross Site Scripting / SQL Injection

Vulnerability ID: HTB23023 Reference: http://www.htbridge.ch/advisory/multiplevulnerabilitiesinopenrealty.html Product: Open-Realty Vendor: Transparent Technologies, Inc. http://www.open-realty.org/ Vulnerable Version: 3.1.5 and probably prior Tested on: 3.1.5 Vendor Notification: 07 June 2011...

Multiple vulnerabilities in Open-Realty

Vulnerability ID: HTB23023 Reference: http://www.htbridge.ch/advisory/multiplevulnerabilitiesinopenrealty.html Product: Open-Realty Vendor: Transparent Technologies, Inc. http://www.open-realty.org/ Vulnerable Version: 3.1.5 and probably prior Tested on: 3.1.5 Vendor Notification: 07 June 2011...

Cross-site Scripting Vulnerabilities in Open-Realty

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Open-Realty, which can be exploited to perform cross-site scripting attacks. 1 Cross-site scripting vulnerabilities in Open-Realty 1.1 Input passed via the "name", "email", "friendemail", "subject", "message" POS...

Ypninc Realty Classifieds Cross Site Scripting

Author: Andrea Bocchetti Homepage : http://www.geekit.it Software Info Name : Ypninc Realty Classifieds Vendor : http://fsbo.ypninc.com/ x Xss local news local news field is potentially exploitable XSS Demo exploit : http://fsbo.ypninc.com/localnews.php Author: Andrea Bocchetti Homepage :...

Ypninc Realty Classifieds SQL Injection Vulnerability

Exploit for php platform in category web applications Script Name: Ypninc Realty Classifieds Script Demo: http://fsbo.ypninc.com/ BUG: Sql INjection google dork: inurl:"gmap.php?id="; OBS: With this dork you will find a lot of sql injection aiuhauiha ;D Found: by Br0ly Lame script ;/... p0c:...

Ypninc Realty Classifieds SQL Injection

Script Name: Ypninc Realty Classifieds Script Demo: http://fsbo.ypninc.com/ BUG: Sql INjection google dork: inurl:"gmap.php?id="; OBS: With this dork you will find a lot of sql injection aiuhauiha ;D Found: by Br0ly Lame script ;/... p0c:...

Ypninc Realty Classifieds - SQL Injection

Ypninc Realty Classifieds - SQL Injection Script Name: Ypninc Realty Classifieds Script Demo: http://fsbo.ypninc.com/ BUG: Sql INjection google dork: inurl:"gmap.php?id="; OBS: With this dork you will find a lot of sql injection aiuhauiha ;D Found: by Br0ly Lame script ;/... p0c:...

Ypninc Realty Classifieds - SQL Injection

Script Name: Ypninc Realty Classifieds Script Demo: http://fsbo.ypninc.com/ BUG: Sql INjection google dork: inurl:"gmap.php?id="; OBS: With this dork you will find a lot of sql injection aiuhauiha ;D Found: by Br0ly Lame script ;/... p0c:...

Open-Realty index.php select_users_lang Parameter Traversal Local File Inclusion

The web server hosts Open-Realty, a web-based real estate listing management application written in PHP. At least one install of Open-Realty on the remote host fails to sanitize user-supplied input to the 'selectuserslang' parameter in POST requests to the 'index.php' script before using it to...

Open-Realty 2.5.7 Local File Disclosure

" sh.php"; ? include the image and sh.php will be generated. proceed with sh.php MAGICQUOTES must be 'off' and %00 must not be replaced with \0. / print "\n\n\n"; print "LFI discovery and implementation: Nikola Petrov [email protected]\n"; print "Date: 05.09.2009\n"; print "\n\n"; if$argc 5...

Open-Realty 2.5.7 Local File Disclosure Vulnerability

Exploit for php platform in category web applications ===================================================== Open-Realty 2.5.7 Local File Disclosure Vulnerability ===================================================== " sh.php"; ? include the image and sh.php will be generated. proceed with sh.php...

Open-Realty 2.5.7 - Local File Disclosure

Open-Realty 2.5.7 - Local File Disclosure " sh.php"; ? include the image and sh.php will be generated. proceed with sh.php MAGICQUOTES must be 'off' and %00 must not be replaced with \0. / print "\n\n\n"; print "LFI discovery and implementation: Nikola Petrov [email protected]\n"; print "Date:...

Open-Realty 2.5.7 - Local File Disclosure

" sh.php"; ? include the image and sh.php will be generated. proceed with sh.php MAGICQUOTES must be 'off' and %00 must not be replaced with \0. / print "\n\n\n"; print "LFI discovery and implementation: Nikola Petrov [email protected]\n"; print "Date: 05.09.2009\n"; print "\n\n"; if$argc 5...

Open Realty 2.x / 3.x Cross Site Scripting

Title: persistence XSS flaw in Open Realty 2.x and 3.x Author: K053 Date: 2010-7-24 Hompage: http://open-realty.org Download Link: http://www.open-realty.org/download.html Version: 3.x & 2.x ======================================================================================================...

Open Realty 2.x and 3.x Persistent XSS Vulnerability

Exploit for php platform in category web applications ==================================================== Open Realty 2.x and 3.x Persistent XSS Vulnerability ==================================================== Author: K053 Date: 2010-7-24 Hompage: http://open-realty.org Download Link:...

Open Realty 2.x3.x - Persistent Cross-Site Scripting

Open Realty 2.x3.x - Persistent Cross-Site Scripting Title: persistence XSS flaw in Open Realty 2.x and 3.x Author: K053 Date: 2010-7-24 Hompage: http://open-realty.org Download Link: http://www.open-realty.org/download.html Version: 3.x & 2.x...