Joomla RealEstateManager 4.2.0 SQL Injection

Title: Joomla RealEstateManager 4.2.0 - SQL injection Credit: Bilal KARDADOU Vendor: http://ordasoft.com/ URL: https://extensions.joomla.org/extensions/extension/vertical-markets/real-estate/realestatemanager/ Product: 'Joomla RealEstateManager 4.2.0' Developer: OrdaSoft Extension type: Plugin La...

CVE-2017-17692

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property...

CVE-2017-17692

Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property...

Updated pcre packages fix security vulnerabilities

The compilebracketmatchingpath function in pcrejitcompile.c in PCRE through 8.x before revision 1680 e.g., the PHP 7.1.1 bundled version allows remote attackers to cause a denial of service out-of-bounds read and application crash via a crafted regular expression CVE-2017-6004. A vulnerability wa...

lionard.fr XSS vulnerability

Open Bug Bounty ID: OBB-456777 Description| Value ---|--- Affected Website:| lionard.fr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Foxit Reader Annotation Object modDate Property Remote Code Execution Vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the modDate property of the Annotation object in Foxit Reader version 8.3.1, where the program fails to validate the existence of an object before performing an operati...

Foxit Reader value attribute remote code execution vulnerability

Foxit Reader is China's Foxit Foxit Software Corporation, a PDF document reader. A remote code execution vulnerability exists in the value property of the Field object in Foxit Reader version 8.3.1.21155, which originates from the program failing to validate the existence of an object before...

southgujaratpropertyhub.com XSS vulnerability

Open Bug Bounty ID: OBB-454284 Description| Value ---|--- Affected Website:| southgujaratpropertyhub.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

PHP Scripts Mall Responsive Realestate Script SQL Injection Vulnerability

PHP Scripts Mall Responsive Realestate Script is a PHP and MySQL based real estate sales website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Responsive Realestate Script version 3.2. A remote attacker can exploit this vulnerability by sending the...

EAP-7: Wrong privileges on multiple property files

It was found that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system...

EAP-7: Wrong privileges on multiple property files

It was found that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system...

EAP-7: Wrong privileges on multiple property files

It was found that properties based files of the management and the application realm configuration that contain user to role mapping are world readable allowing access to users and roles information to all the users logged in to the system...

CVE-2017-17628

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...

CVE-2017-17628

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...

Sql injection

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...

CVE-2017-17628

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...

kathybowes.com XSS vulnerability

Vulnerable URL: http://kathybowes.com/powell-river-properties.php?pricehigh=100000000=10"';-- =all=0= Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12943010 VIP website status:| No Coordinated Disclosure...

culturalproperty.state.gov XSS vulnerability

Open Bug Bounty ID: OBB-448510 Description| Value ---|--- Affected Website:| culturalproperty.state.gov Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

bootstrap_carousel - Moderately critical - Cross Site Scripting - SA-CONTRIB-2017-088

This module provides a way to make carousels, based on bootstrap-carousel.js. The module doesn't sufficiently handle output of img HTML tag's alt property. This vulnerability is mitigated by the fact that an attacker must have a role with the permission "Carousel: Create new content" or any simil...

ballandpercival.com XSS vulnerability

Open Bug Bounty ID: OBB-440986 Description| Value ---|--- Affected Website:| ballandpercival.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...