Real Estate Portal 4.1 Cross Site Scripting

Real Estate Portal v4.1 Multiple Persistent XSS Vulnerabilities Vendor: NetArt Media Product web page: http://www.netartmedia.net Affected version: 4.1 Summary: Real Estate Portal is a software written in PHP, allowing you to launch powerful and professional looking real estate portals with rich...

Real Estate Portal 4.1 - Multiple Vulnerabilities

Exploit for php platform in category web applications Real Estate Portal v4.1 Remote Code Execution Vulnerability Vendor: NetArt Media Product web page: http://www.netartmedia.net Affected version: 4.1 Summary: Real Estate Portal is a software written in PHP, allowing you to launch powerful and...

Real Estate Portal 4.1 - Multiple Vulnerabilities

Real Estate Portal 4.1 - Multiple Vulnerabilities Real Estate Portal v4.1 Remote Code Execution Vulnerability Vendor: NetArt Media Product web page: http://www.netartmedia.net Affected version: 4.1 Summary: Real Estate Portal is a software written in PHP, allowing you to launch powerful and...

Real Estate Portal 4.1 - Multiple Vulnerabilities

Real Estate Portal v4.1 Remote Code Execution Vulnerability Vendor: NetArt Media Product web page: http://www.netartmedia.net Affected version: 4.1 Summary: Real Estate Portal is a software written in PHP, allowing you to launch powerful and professional looking real estate portals with rich...

Real Estate Portal v4.1 Remote Code Execution and Persistent XSS Vulnerabilities

Summary Real Estate Portal is a software written in PHP, allowing you to launch powerful and professional looking real estate portals with rich functionalities for the private sellers, buyers and real estate agents to list properties for sale or rent, search in the database, show featured ads and...

NetArt Media iBoutique 4.0 (index.php key parameter) SQL Injection Vulnerability

No description provided by source. Title : NetArt Media iBoutique SQL Injection Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=510 : http://secpod.org/advisories/SecPodNetArtMediaiBoutiqueSQLiVuln.txt...

CVE-2012-6509

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg...

CVE-2012-6508

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

CVE-2012-6510

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PWRS or 2 Description field when posting a new vehicle; 3 news title when creating news; 4 Name when creating a sub user; 5 group name when...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to hijack the authentication of administrators for requests that 1 change arbitrary user passwords via a nouveau action in the security module to cars/ADMIN/index.php; 2 create a user or...

Unrestricted file upload

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PWRS or 2 Description field when posting a new vehicle; 3 news title when creating news; 4 Name when creating a sub user; 5 group name when...

CVE-2012-6510

CVE-2012-6510 affects NetArt Media Car Portal 3.0. The issue is multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via various input fields (PWRS/Description when posting a vehicle; news title; sub user name; group name; dealer n...

CVE-2012-6508

CVE-2012-6508 affects NetArt Media Car Portal 3.0 with multiple CSRF vulnerabilities that allow an attacker to hijack administrator sessions and perform admin-level actions such as changing user passwords, creating new users or sub-users, and editing profile data via specific actions in the secur...

CVE-2012-6509

Unrestricted file upload vulnerability in NetArt Media Car Portal 3.0 allows remote attackers to execute arbitrary PHP code by uploading a file a double extension, as demonstrated by .php%00.jpg...

CVE-2012-6509

CVE-2012-6509 affects NetArt Media Car Portal 3.0. The vulnerability is an unrestricted file upload that allows remote code execution by uploading a file with a double extension (e.g., .php%00.jpg). The available documents describe the impact as remote PHP code execution and do not provide remedi...

NetArt Media iBoutique 'key' Parameter SQL Injection Vulnerability

NetArt Media iBoutique is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

iBoutique 4.0 - key SQL Injection

iBoutique 4.0 - key SQL Injection Title : NetArt Media iBoutique SQL Injection Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=510 : http://secpod.org/advisories/SecPodNetArtMediaiBoutiqueSQLiVuln.txt...

NetArt Media iBoutique 4.0 SQL Injection

Title : NetArt Media iBoutique SQL Injection Vulnerability Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=510 : http://secpod.org/advisories/SecPodNetArtMediaiBoutiqueSQLiVuln.txt Software : NetArt Media iBoutique...

NetArt Media Pharmacy System 2.0 XSS / SQL Injection

Title : NetArt Media Pharmacy System SQL Injection and Cross-site Scripting Vulnerabilities Author : Antu Sanadi SecPod Technologies www.secpod.com Vendor : http://www.netartmedia.net/ Advisory : http://secpod.org/blog/?p=513 :...