CVE-2006-6342

Multiple SQL injection vulnerabilities in KLF-DESIGN aka Kim L. Fraser KLF-REALTY allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 agent parameters in a searchlisting.asp, and the 3 propertyid parameter in b detail.asp...

CVE-2006-6342

CVE-2006-6342 affects KLF-DESIGN/KLF-REALTY. The flaw allows remote SQL injection via parameters (category, agent) in search_listing.asp and (property_id) in detail.asp, enabling arbitrary SQL execution as described in the NVD entry. No explicit remediation or affected version details are provide...

CVE-2006-6342

Multiple SQL injection vulnerabilities in KLF-DESIGN aka Kim L. Fraser KLF-REALTY allow remote attackers to execute arbitrary SQL commands via the 1 category and 2 agent parameters in a searchlisting.asp, and the 3 propertyid parameter in b detail.asp...

klf-realty [injection sql]

vendor site:http://klf-design.com/ product :klf-realty bug:injection sql risk : medium injection sql : /searchlisting.asp?category='sql /detail.asp?propertyid='sql /searchlisting.asp?agent='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

klfrealty.txt

vendor site:http://klf-design.com/ product :klf-realty bug:injection sql risk : medium injection sql : /searchlisting.asp?category='sql /detail.asp?propertyid='sql /searchlisting.asp?agent='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

Klf-Realty 2.0 - 'search_listing.asp' Multiple SQL Injections

source: https://www.securityfocus.com/bid/21199/info Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, access or...

Klf-Realty 2.0 - search_listing.asp Multiple SQL Injections

Klf-Realty 2.0 - searchlisting.asp Multiple SQL Injections source: https://www.securityfocus.com/bid/21199/info Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could...