abarcarSQL.txt

software:Abarcar product:Realty Portal vendor site : http://www.abarcar.com/ risk : medium /newsdetails.php?neid=sql /slistl.php?slid=sql /content.php?cat=sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

Abarcar Realty Portal [injection sql]

software:Abarcar product:Realty Portal vendor site : http://www.abarcar.com/ risk : medium /newsdetails.php?neid=sql /slistl.php?slid=sql /content.php?cat=sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

Abarcar Realty Portal 5.1.56.0.1 - Multiple SQL Injections

Abarcar Realty Portal 5.1.56.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/20970/info Abarcar Realty Portal is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Abarcar Realty Portal 5.1.5/6.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/20970/info Abarcar Realty Portal is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

CVE-2006-3148

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...

CVE-2006-3165

SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter...

CVE-2006-3167

Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified manipulations that produce an error message...

CVE-2006-3166

Cross-site scripting XSS vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter...

CVE-2006-3148

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...

CVE-2006-3165

SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter...

CVE-2006-3166

Cross-site scripting XSS vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter...

CVE-2006-3167

Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified manipulations that produce an error message...

CVE-2006-3148

The CVE-2006-3148 entry concerns an SQL injection in Open-Realty 2.3.1. The vulnerability affects the application via the sorttype parameter to index.php, with potential arbitrary SQL execution if exploitable. The root cause is a likely improper handling of user input in search.inc.php, as cited ...

CVE-2006-3165

CVE-2006-3165 affects Free Realty 2.9-0.7 and earlier, with a SQL injection in propview.php exploitable via the sort parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, leading to potential data disclosure or modification. Exploit details, affected versions bey...

CVE-2006-3166

The CVE-2006-3166 entry describes a Cross-site scripting (XSS) vulnerability in propview.php of Free Realty (versions 2.9-0.6 and earlier). The issue allows remote attackers to cause execution of arbitrary web scripts or HTML by manipulating the sort parameter. Affected component: Free Realty’s p...

CVE-2006-3167

The CVE-2006-3167 vulnerability affects Free Realty before 2.9. The issue arises from unspecified manipulations that produce an error message, allowing remote attackers to obtain the full path and other sensitive information. This is a confidentiality impact (partial) without evidence of data int...

CVE-2006-3166: Undefined Security Weakness

Cross-site scripting XSS vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter...

CVE-2006-3148: Undefined Security Weakness

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...

CVE-2006-3165: Undefined Security Weakness

SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter...

CVE-2006-3167: Undefined Security Weakness

Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified manipulations that produce an error message...