CVE-2024-32128 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4...

CVE-2024-32128 WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4...

CVE-2024-32128

CVE-2024-32128 is an unauthenticated SQL Injection in Realtyna Organic IDX plugin for WordPress (Realtyna Organic IDX plugin + WPL Real Estate). The issue is caused by improper neutralization of input in the plugin, enabling an attacker to manipulate SQL queries. Affected versions are from n/a up...

PT-2024-24422

Name of the Vulnerable Software and Affected Versions Realtyna Organic IDX plugin versions through 4.14.4 Description The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as 'SQL Injection'. This allows for potential exploitation by injecting...

WordPress Plugin Realtyna has a SQL injection vulnerability in its Organic IDX component.

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin...

CVE-2024-32128: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Realtyna Realtyna Organic IDX plugin.This issue affects Realtyna Organic IDX plugin: from n/a through 4.14.4...

WordPress Realtyna Organic IDX plugin + WPL Real Estate plugin <= 4.14.4 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Joshua Chan Patchstack Alliance in WordPress Plugin Realtyna Organic IDX plugin versions = 4.14.4...

WordPress Realtyna Organic IDX plugin Plugin <= 4.14.4 is vulnerable to SQL Injection

Software Realtyna Organic IDX plugin Type Plugin Vulnerable versions = 4.14.4 Fixed in 4.14.8 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-32128 Patch priority High CVSS severity High 9.3 Developer Claim ownership PSID df09fa02a23c Credits Joshua Chan Required privilege...

Component Realtyna Translator Local File Inclusion Vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed using PHP and MySQL. A local file inclusion vulnerability exists in the Joomla! component Realtyna Translator. An attacker can exploit the vulnerability to obtain sensitive information...

WordPress Plugin Real-Estate-Listing-Realtyna-Wpl Database Backup Leakage Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the WordPress plugin Real-Estate-Listing-Realtyna-Wpl. An attacker can exploit the...

WordPress Real-Estate-Listing-Realtyna-Wpl 4.3.2 Database Disclosure

Exploit Title : WordPress Real-Estate-Listing-Realtyna-Wpl Plugins 4.3.2 Database Backup Disclosure Author Discovered By : KingSkrupellos from Cyberizm Digital Security Army Date : 08/12/2018 Vendor Homepage : realtyna.com wordpress.org/plugins/real-estate-listing-realtyna-wpl/ Software Download...

Joomla! Realtyna RPL (com_rpl) SQL Injection Vulnerability

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features.Realtyna RPL comrpl component is one of the real estate information component. A SQL injection vulnerability exists in...

Joomla! Realtyna RPL (com_rpl) component cross-site request forgery vulnerability

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds, site search and other features.Realtyna RPL comrpl component is one of the real estate information component. A cross-site request forgery vulnerabili...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Realtyna RPL comrpl component before 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests that add a user via an adduser action to administrator/index.php...

Sql injection

Multiple SQL injection vulnerabilities in the Realtyna RPL comrpl component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the 1 id, 2 copyfield in a datacopy action, 3 pshow in an updatefield action, 4 css, 5 tip, 6 catid, 7 textsearch, 8 plisting, or ...

CVE-2015-7714

Multiple SQL injection vulnerabilities in the Realtyna RPL comrpl component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the 1 id, 2 copyfield in a datacopy action, 3 pshow in an updatefield action, 4 css, 5 tip, 6 catid, 7 textsearch, 8 plisting, or ...

CVE-2015-7715

Cross-site request forgery CSRF vulnerability in the Realtyna RPL comrpl component before 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests that add a user via an adduser action to administrator/index.php...

CVE-2015-7714

CVE-2015-7714 affects Realtyna RPL (com_rpl) Joomla! extension. Multiple SQL injection vectors exist via administrator/index.php parameters (id, copy_field in data_copy, pshow in update_field, css, tip, cat_id, text_search, plisting, pwizard). Affected versions are before 8.9.5. Exploitation allo...

CVE-2015-7715

The CVE covers a CSRF vulnerability in Realtyna RPL (com_rpl) for Joomla!, affecting versions prior to 8.9.5. The issue allows an attacker to hijack an administrator’s session by triggering an add_user action via administrator/index.php, enabling remote user creation without proper authorization....

CVE-2015-7715

Cross-site request forgery CSRF vulnerability in the Realtyna RPL comrpl component before 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests that add a user via an adduser action to administrator/index.php...