22 matches found
CVE-2022-28410
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.php?f=deleteagent...
CVE-2022-28411
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agents/manageagent...
CVE-2022-28030
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteestate...
CVE-2022-28028
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...
CVE-2023-5805
CVE-2023-5805 corresponds to a SQL injection in SourceCodester Simple Real Estate Portal System 1.0, caused by unsafely handling the id parameter in view_estate.php. Exploitation can be remote and public disclosures exist. Affected component: view_estate.php (and variations in naming). Root cause...
CVE-2023-5805: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple Real Estate Portal System 1.0. It has been classified as critical. Affected is an unknown function of the file viewestate.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit h...
Sql injection
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...
Sql injection
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...
CVE-2022-28028
The CVE-2022-28028 entry concerns Simple Real Estate Portal System v1.0, which contains a SQL injection vulnerability in the parameter /reps/classes/Master.php?f=delete_amenity. Connected documents corroborate the issue across multiple sources, and CVSS v3.1 scores indicate a CRITICAL severity (9...
CVE-2022-28410
The CVE-2022-28410 entry corresponds to a SQL injection in Simple Real Estate Portal System v1.0, exploitable via /reps/classes/Users.php?f=delete_agent. The connected documents confirm the affected software/component (Simple Real Estate Portal System v1.0) and the root cause (SQL injection). Exp...
PT-2022-18768
Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The vulnerability can be exploited via the /reps/classes/Master.php API endpoint, specifically when the f paramet...
PT-2022-18770
Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The issue is related to the "/reps/classes/Master.php?f=delete estate" API endpoint. Recommendations For Simple...
CVE-2022-28410: Improper Neutralization of Special Elements used in an SQL Command
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Users.php?f=deleteagent...
PT-2022-18767
Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the "/reps/classes/Master.php?f=delete amenity" API endpoint. Recommendations For Simple Real Estate Portal...
CVE-2022-28028: Improper Neutralization of Special Elements used in an SQL Command
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteamenity...
PT-2022-19003
Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The issue can be exploited via the "/reps/admin/?page=agents/manage agent" API endpoint. Recommendations For Simp...
PT-2022-19002
Name of the Vulnerable Software and Affected Versions Simple Real Estate Portal System version 1.0 Description A SQL injection issue was found in the Simple Real Estate Portal System. The vulnerability can be exploited via the /reps/classes/Users.php API endpoint, specifically when the f paramete...
CVE-2022-28030: Improper Neutralization of Special Elements used in an SQL Command
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deleteestate...
CVE-2022-28029: Improper Neutralization of Special Elements used in an SQL Command
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=deletetype...
CVE-2022-28411: Improper Neutralization of Special Elements used in an SQL Command
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/admin/?page=agents/manageagent...