CVE-2012-4278

Multiple cross-site scripting XSS vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 notes parameter to a admin/agenteditor.php; 2 title, 3 previewdesc, 4 fulldesc, or 5 notes parameter b to agentadmin.php or c in an addlisting action to...

CVE-2012-4278

CVE-2012-4278 describes multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6. The issues allow remote attackers to inject arbitrary scripts via: (1) the notes parameter to admin/agenteditor.php; (2) the title, (3) previewdesc, (4) fulldesc, or (5) notes parameter to agentadm...

CVE-2012-4278

Multiple cross-site scripting XSS vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 notes parameter to a admin/agenteditor.php; 2 title, 3 previewdesc, 4 fulldesc, or 5 notes parameter b to agentadmin.php or c in an addlisting action to...