EUVD-2012-1005

Malware in sbrugna...

CVE-2009-3497

SQL injection vulnerability in viewlisting.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

Vastal I-Tech Agent Zone aka The Real Estate Script allows SQL Injection in searchCommercial.php via the propertytype, city, or postedby parameter, or searchResidential.php via the propertytype, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and...

CVE-2017-15991

Vastal I-Tech Agent Zone aka The Real Estate Script allows SQL Injection in searchCommercial.php via the propertytype, city, or postedby parameter, or searchResidential.php via the propertytype, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and...

CVE-2017-15991

Vastal I-Tech Agent Zone aka The Real Estate Script allows SQL Injection in searchCommercial.php via the propertytype, city, or postedby parameter, or searchResidential.php via the propertytype, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and...

CVE-2017-15991

Vastal I-Tech Agent Zone (aka The Real Estate Script) contains a SQL injection vulnerability affecting searchCommercial.php (parameters: property_type, city, posted_by) and searchResidential.php (parameters: property_type, city, bedroom). The issue arises from unsanitized input being interpolated...

CVE-2017-15991: Improper Neutralization of Special Elements used in an SQL Command

Vastal I-Tech Agent Zone aka The Real Estate Script allows SQL Injection in searchCommercial.php via the propertytype, city, or postedby parameter, or searchResidential.php via the propertytype, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and...

PT-2017-14345

Vastal I-Tech Agent Zone aka The Real Estate Script allows SQL Injection in searchCommercial.php via the property type, city, or posted by parameter, or searchResidential.php via the property type, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and...

Vastal I-Tech Agent Zone - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Vastal I-Tech Agent Zone - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://vastal.com/ Software http://vastal.com/agent-zone-real-estate-script.html Demo: http://agentzone.vastal.com/demo/ Version: N/A Category:...

Vastal I-Tech Agent Zone SQL Injection

Exploit Title: Vastal I-Tech Agent Zone - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://vastal.com/ Software http://vastal.com/agent-zone-real-estate-script.html Demo: http://agentzone.vastal.com/demo/ Version: N/A Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

Vastal I-Tech Agent Zone - 'searchCommercial.php' / 'searchResidential.php' SQL Injection

Exploit Title: Vastal I-Tech Agent Zone - SQL Injection Dork: N/A Date: 30.10.2017 Vendor Homepage: http://vastal.com/ Software http://vastal.com/agent-zone-real-estate-script.html Demo: http://agentzone.vastal.com/demo/ Version: N/A Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE:...

CVE-2012-0982

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the pricefrom parameter...

CVE-2012-0982

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the pricefrom parameter...

CVE-2012-0982

CVE-2012-0982 describes an SQL injection vulnerability in Vastal I-Tech Agent Zone (aka The Real Estate Script). The issue exists in search.php and allows remote attackers to execute arbitrary SQL commands through the price_from parameter. The description explicitly notes remote exploitation with...

CVE-2012-0982: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the pricefrom parameter...

PT-2012-2988

Name of the Vulnerable Software and Affected Versions Vastal I-Tech Agent Zone aka The Real Estate Script affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the price from parameter in the "search.php" endpoint...

Vastal I-Tech Agent Zone (search.php) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Agent Zone Vastal I-Tech Blind SQL Injection Vulnerability Date: 31.01.2012 Author: Cagri Tepebasili Software : http://www.vastal.com/agent-zone-real-estate-script.html Tested on: Linux Mint 12 The First Step...

Sql injection

SQL injection vulnerability in viewlisting.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2009-3497

Vastal I-Tech Agent Zone (aka The Real Estate Script) is affected by CVE-2009-3497 due to an SQL injection in view_listing.php via the id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands. The affected component is the view_listing.php script; the root cause i...

CVE-2009-3497

SQL injection vulnerability in viewlisting.php in Vastal I-Tech Agent Zone aka The Real Estate Script allows remote attackers to execute arbitrary SQL commands via the id parameter...