CVE-2022-28410

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.php?f=deleteagent...

CVE-2022-28411

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agents/manageagent...

CVE-2022-28030

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteestate...

CVE-2022-28028

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...

CVE-2023-5805

CVE-2023-5805 corresponds to a SQL injection in SourceCodester Simple Real Estate Portal System 1.0, caused by unsafely handling the id parameter in view_estate.php. Exploitation can be remote and public disclosures exist. Affected component: view_estate.php (and variations in naming). Root cause...

CVE-2023-5805: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Affected is an unknown function of the file viewestate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit h...

Sql injection

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...

Sql injection

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...

CVE-2022-28028

The CVE-2022-28028 entry concerns Simple Real Estate Portal System v1.0, which contains a SQL injection vulnerability in the parameter /reps/classes/Master.php?f=delete_amenity. Connected documents corroborate the issue across multiple sources, and CVSS v3.1 scores indicate a CRITICAL severity (9...

CVE-2022-28410

The CVE-2022-28410 entry corresponds to a SQL injection in Simple Real Estate Portal System v1.0, exploitable via /reps/classes/Users.php?f=delete_agent. The connected documents confirm the affected software/component (Simple Real Estate Portal System v1.0) and the root cause (SQL injection). Exp...

CVE-2022-28030: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteestate...

CVE-2022-28028: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...

CVE-2022-28029: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...

CVE-2022-28411: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agents/manageagent...

CVE-2022-28410: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.php?f=deleteagent...

CVE-2022-25399: Improper Neutralization of Special Elements used in an SQL Command

Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter...