EUVD-2006-6325

Malware in sbrugna...

CVE-2006-6342

Multiple SQL injection vulnerabilities in KLF-DESIGN aka Kim L. Fraser KLF-REALTY allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 agent parameters in a searchlisting.asp, and the 3 propertyid parameter in b detail.asp...

CVE-2006-6342

CVE-2006-6342 affects KLF-DESIGN/KLF-REALTY. The flaw allows remote SQL injection via parameters (category, agent) in search_listing.asp and (property_id) in detail.asp, enabling arbitrary SQL execution as described in the NVD entry. No explicit remediation or affected version details are provide...

klfrealty.txt

vendor site:http://klf-design.com/ product :klf-realty bug:injection sql risk : medium injection sql : /searchlisting.asp?category='sql /detail.asp?propertyid='sql /searchlisting.asp?agent='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...