CVE-2012-4280

Multiple cross-site request forgery CSRF vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that 1 add an agent via an addagent action or 2 modify an agent...

CVE-2012-4278

Multiple cross-site scripting XSS vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 notes parameter to a admin/agenteditor.php; 2 title, 3 previewdesc, 4 fulldesc, or 5 notes parameter b to agentadmin.php or c in an addlisting action to...

CVE-2012-4280

CVE-2012-4280 affects Free Realty 3.1-0.6, with multiple CSRF weaknesses in admin/agenteditor.php. The flaws allow remote attackers to hijack administrator sessions by issuing requests to add an agent (addagent action) or modify an existing agent, compromising authentication integrity. Exploitati...