1498 matches found
CVE-2013-5931
SQL injection vulnerability in propertylistingsdetail.php in Real Estate PHP Script allows remote attackers to execute arbitrary SQL commands via the listingid parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in searchresidential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web script or HTML via the bos parameter...
CVE-2013-5931
SQL injection vulnerability in propertylistingsdetail.php in Real Estate PHP Script allows remote attackers to execute arbitrary SQL commands via the listingid parameter...
CVE-2013-5930
CVE-2013-5930 affects the Real Estate PHP Script, specifically the search_residential.php endpoint. It is a cross-site scripting (XSS) vulnerability exploitable via the bos parameter, allowing remote attackers to inject arbitrary scripts/HTML. The NVD entry notes a CVSS v2 base score of 4.3 (Medi...
CVE-2013-5931: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in propertylistingsdetail.php in Real Estate PHP Script allows remote attackers to execute arbitrary SQL commands via the listingid parameter...
CVE-2013-5930: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in searchresidential.php in Real Estate PHP Script allows remote attackers to inject arbitrary web script or HTML via the bos parameter...
Joomla core <= 3.1.5 reflected XSS vulnerability
============================================================ - Original release date: August 05, 2013 - Discovered by: Emilio Pinna Application Security Analyst at Abinsula - Contact: emilio dot pinn at gmail dot com - Severity: 4.3/10 Base CVSS Score...
Real Estate PHP Script Cross Site Scripting
Cross Site Scripting Application Name : Real Estate Php Script Vulnerable Type : Post Cross Site Scripting Infection : Yönetici ve User cookieleri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 | Bug Researchers Example :...
Juniper JunOS 9.x Cross Site Scripting
Exploit Title: Juniper JUNOS 9.X HTML Injection Vulnerability Google Dork: intext:"2009, Juniper Networks" intext:"Firewall User Web-Authentication" Date: Jul 24th 2013 Exploit Author: Andrea Menin linkedin.com/in/andreamenin Vendor Homepage: http://www.juniper.net Version: JUNOS 9.X Tested on:...
[waraxe-2013-SA#106] - Multiple Vulnerabilities in Saurus CMS 4.7.1
waraxe-2013-SA106 - Multiple Vulnerabilities in Saurus CMS 4.7.1 ================================================================================ Author: Janek Vind "waraxe" Date: 14. July 2013 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-106.html Description of vulnerable software...
WordPress Plugin miniBB - SQL Injection / Multiple Cross-Site Scripting Vulnerabilities
source: https://www.securityfocus.com/bid/61116/info miniBB is prone to an SQL-injection vulnerability and multiple cross-site scripting vulnerabilities. Successful exploits could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data...
CentOS 4 : php (CESA-2007:0349)
Updated PHP packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A hea...
Securimage example_form.php XSS
The version of Securimage on the remote host contains a flaw that allows a remote cross-site scripting vulnerability because the application does not validate the 'REQUESTURI' variable in the 'exampleform.php' script. An attacker may be able to leverage this to inject arbitrary HTML and script co...
Freelancer.com XSS + Cookie Grabber
Stored XSS in Freelancer.com + Cookie Stealer. The package contains the how-to guide, PHP scriptcookie grabber and XSS vector in order. This is private exploit. You can buy it at https://0day.today...
eYou /php/ip_status.php 命令执行漏洞
No description provided by source...
MediaWiki mwdoc-filter.php Arbitrary File Access
The MediaWiki install hosted on the remote web server is affected by an arbitrary file access vulnerability due to a failure to restrict the execution of the 'maintenance/mwdoc-filter.php' script. An attacker can exploit this issue by sending a specialized URI to read files located outside the we...
ClipShare 4.1.1 - gid Blind SQL Injection
ClipShare 4.1.1 - gid Blind SQL Injection Exploit Title: ClipShare 4.1.1 gmembers.php Blind SQL Injection Vulnerability Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions ar...
ClipShare 4.1.1 - 'gid' Blind SQL Injection
Exploit Title: ClipShare 4.1.1 gmembers.php Blind SQL Injection Vulnerability Exploit Author: Esac Vulnerable Software: ClipShare - Video Sharing Community Script 4.1.4 Official site: http://www.clip-share.com Software License: Commercial. all versions are vulnerable: Note : this vulnerable work...
OpenEMR 4.1.1 Shell Upload
?php / OpenEMR 4.1.1 ofcuploadimage.php Arbitrary File Upload Vulnerability Vendor: OpenEMR Product web page: http://www.open-emr.org Affected version: 4.1.1 Summary: OpenEMR is a Free and Open Source electronic health records and medical practice management application that can run on Windows,...
[SECURITY] [DSA 2610-1] ganglia security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2610-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez January 21, 2013 http://www.debian.org/security/faq -...