EUVD-2002-2283

Malware in sbrugna...

EUVD-2010-1728

Malware in sbrugna...

CVE-2012-4278

Multiple cross-site scripting XSS vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 notes parameter to a admin/agenteditor.php; 2 title, 3 previewdesc, 4 fulldesc, or 5 notes parameter b to agentadmin.php or c in an addlisting action to...

CVE-2012-4278: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the 1 notes parameter to a admin/agenteditor.php; 2 title, 3 previewdesc, 4 fulldesc, or 5 notes parameter b to agentadmin.php or c in an addlisting action to...

PT-2012-5306

Name of the Vulnerable Software and Affected Versions Free Realty versions 3.1-0.6 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved via several parameters, including notes to...

Sql injection

Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the 1 login field aka agentname parameter or 2 password field aka agentpassword parameter...

CVE-2010-1708

Affected software: Free Realty, via agentadmin.php. Vulnerability: multiple SQL injection flaws that allow remote attackers to execute arbitrary SQL commands by supplying crafted values in the login field (agentname) or the password field (agentpassword). Impact: data exposure and manipulation co...

CVE-2010-1708

Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the 1 login field aka agentname parameter or 2 password field aka agentpassword parameter...

CVE-2010-1708: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the 1 login field aka agentname parameter or 2 password field aka agentpassword parameter...

CVE-2002-2305

The connected records confirm a concrete vulnerability: SQL injection in Immobilier’s agentadmin.php, exploitable via the (1) agentname or (2) agentpassword parameters. This allows remote attackers to execute arbitrary SQL commands. Per the CVSS data, impact includes partial confidentiality, part...

CVE-2002-2305: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the 1 agentname or 2 agentpassword parameter...

CVE-2002-2305

SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the 1 agentname or 2 agentpassword parameter...