EUVD-2008-4309

Malware in sbrugna...

EasyRealtorPRO 2008 'site_search.php' Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/31401/info EasyRealtorPRO is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker t...

CVE-2008-4328

SQL injection vulnerability in sitesearch.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the 1 item, 2 searchordermethod, and 3 searchorder parameters...

Sql injection

SQL injection vulnerability in sitesearch.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the 1 item, 2 searchordermethod, and 3 searchorder parameters...

CVE-2008-4328

SQL injection vulnerability in sitesearch.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the 1 item, 2 searchordermethod, and 3 searchorder parameters...

CVE-2008-4328

CVE-2008-4328 describes an SQL injection vulnerability in EasyRealtorPRO 2008 affecting site_search.php. The flaw allows remote attackers to inject arbitrary SQL through the input parameters (1) item, (2) search_ordermethod, and (3) search_order, leading to potentially unauthorized data access or...

SQL Injection in EasyRealtorPRO 2008

Original article: http://www.davidsopas.com/2008/09/sql-injection-in-easyrealtorpro/ "EasyRealtorPRO 2008 provides you with all features you need to setup your own business oriented real estate website on your own domain name. Our support team will install the script on your server and then you c...

EasyRealtorPRO 2008 - site_search.php Multiple SQL Injections

EasyRealtorPRO 2008 - sitesearch.php Multiple SQL Injections source: https://www.securityfocus.com/bid/31401/info EasyRealtorPRO is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issue...

EasyRealtorPRO 2008 - 'site_search.php' Multiple SQL Injections

source: https://www.securityfocus.com/bid/31401/info EasyRealtorPRO is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acce...

easyrealtor-sql.txt

Original article: http://www.davidsopas.com/2008/09/sql-injection-in-easyrealtorpro/ "EasyRealtorPRO 2008 provides you with all features you need to setup your own business oriented real estate website on your own domain name. Our support team will install the script on your server and then you c...