441 matches found
Realty Web-Base 1.0 - Authentication Bypass
--------------------------------------------------------------- ------------------------------------------------------------ Realty Web-Base v1.0 Auth bypass SQL Injection Vulnerability --------------------------------------------------------------- Founder : ThE g0bL!N Home:WwW.h4ckF0u.CoM...
Sql injection
SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...
CVE-2008-3682
SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...
CVE-2008-3682
SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...
CVE-2008-3682
CVE-2008-3682 describes an SQL injection vulnerability in dpage.php of YPN PHP Realty. The underlying issue is unsafely handling the docID parameter, enabling remote attackers to execute arbitrary SQL commands. Documents consistently state: an injection via docID could impact the application, wit...
PHP Realty 'dpage.php' SQL注入漏洞
BUGTRAQ ID: 30678 CNCAN ID：CNCAN-2008081407 PHP Realty是一款基于PHP的WEB应用程序。 PHP Realty不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于'dpage.php'脚本对用户提交给'docid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 YPN PHP Realty 目前没有解决方案提供： http://ypninc.com/php-realty-fsbo-portal-script/prod76.html...
CVE-2008-3682: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in dpage.php in YPN PHP Realty allows remote attackers to execute arbitrary SQL commands via the docID parameter...
phprealty-sql.txt
┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...
PHP Realty - dpage.php SQL Injection
PHP Realty - dpage.php SQL Injection source: https://www.securityfocus.com/bid/30678/info PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise...
PHP Realty - 'dpage.php' SQL Injection
source: https://www.securityfocus.com/bid/30678/info PHP Realty is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify...
Unfixed XSS vulnerability at www.cunninghamrealtyltd.com
Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.cunninghamrealtyltd.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...
Unfixed XSS vulnerability at www.stewartrealtyllc.com
Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.stewartrealtyllc.com, which at the time of submission ranked 4674956 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. It is...
Sql injection
SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the ida parameter...
CVE-2008-2265
SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the ida parameter...
CVE-2008-2265
CVE-2008-2265 describes a SQL injection in the EMO Realty Manager’s web frontend, specifically in news.php via the ida parameter. The underlying issue is improper sanitization of user-supplied input, allowing remote attackers to craft SQL commands that the application passes to the database. The ...
CVE-2008-2265: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in news.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the ida parameter...
emo-sql.txt
Remote SQL Injection Vulnerabilities EMO Realty Manager Author : HaCkeREgY C0NTACT : [email protected] H^OME : www.PAL-HaCkeR.com & ATSDP.COM Script Name : EMO Realty Manager Download : http://www.emophp.com/ Price : Manager Full License CAD $399 /// Manager Base License CAD $299======= Buy i...
EMO Realty Manager (news.php ida) SQL Injection Vulnerability
No description provided by source. Remote SQL Injection Vulnerabilities EMO Realty Manager Author : HaCkeREgY C0NTACT : [email protected] H^OME : www.PAL-HaCkeR.com & ATSDP.COM Script Name : EMO Realty Manager  ...
EMO Realty Manager (news.php ida) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================= EMO Realty Manager news.php ida SQL Injection Vulnerability ============================================================= Remote SQL Injection Vulnerabilities EMO Realty Manager...
EMO Realty Manager - ida SQL Injection
EMO Realty Manager - ida SQL Injection Remote SQL Injection Vulnerabilities EMO Realty Manager Author : HaCkeREgY C0NTACT : [email protected] H^OME : www.PAL-HaCkeR.com & ATSDP.COM Script Name : EMO Realty Manager Download : http://www.emophp.com/ Price : Manager Full License CAD $399 ///...