45 matches found
CVE-2022-4275: Improper Neutralization
A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument searchproperty leads to sql injection. The attack ca...
CVE-2022-4274: Improper Neutralization
A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of the file /view-property.php. The manipulation of the argument propertyid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2022-4275 House Rental System POST Request search-property.php sql injection
A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument searchproperty leads to sql injection. The attack ca...
CVE-2022-4274 House Rental System view-property.php sql injection
A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of the file /view-property.php. The manipulation of the argument propertyid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2022-4274 House Rental System view-property.php sql injection
A vulnerability, which was classified as critical, was found in House Rental System. Affected is an unknown function of the file /view-property.php. The manipulation of the argument propertyid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to...
CVE-2022-4275 House Rental System POST Request search-property.php sql injection
A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument searchproperty leads to sql injection. The attack ca...
CVE-2022-4051 Hostel Searching Project view-property.php sql injection
A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument propertyid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...
CVE-2022-4051: Improper Neutralization
A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument propertyid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...
CVE-2022-4051 Hostel Searching Project view-property.php sql injection
A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument propertyid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to...
PT-2022-7997
Name of the Vulnerable Software and Affected Versions Itech Real Estate Script version 3.12 Description A critical issue affects an unknown functionality of the file /real-estate-script/search property.php. The manipulation of the property for argument leads to SQL injection. The attack can be...
multiplierz.com XSS vulnerability
Open Bug Bounty ID: OBB-388867 Description| Value ---|--- Affected Website:| multiplierz.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
Widget Property 1.1.19 Property.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15701/info Widget Press Widget Property is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'property.php' script before using it i...
elkagroup (pid) Remote SQL Injection Vulnerability
No description provided by source. elkagroup pid Remote SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoMhttp://WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| script : http://www.elkapax.com & http://www.elkagroup.com ||| DorK : Powered by :...
WhyWeb SQL Injection
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...
Tainos Webdesign (All Scripts) - SQL Injection Cross-Site Scripting HTML Injection
Tainos Webdesign All Scripts - SQL Injection Cross-Site Scripting HTML Injection ------------------------------------------------------------------------------------------- Tainos Webdesign All Scripts SQL/XSS/HTML Injection Vulnerability...
Elkagroup - 'pid' SQL Injection
elkagroup pid Remote SQL Injection Vulnerability || Author: Hussin X || Home : WwW.IQ-TY.CoM || email: darkangelg85atYahooDoTcom ||| script : http://www.elkapax.com & http://www.elkagroup.com ||| DorK : "Powered by : elkagroup.com" POC...
ElkaGroup Image Gallery Property.PHP SQL注入漏洞
ElkaGroup Image Gallery是一款基于PHP的WEB应用程序。 ElkaGroup Image Gallery不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击获得敏感信息。 问题是由于'Property.PHP'脚本对用户提交的'pid'参数缺少过滤，提交恶意SQL查询作为参数数据，可导致应用程序处理时更改原来的SQL逻辑，攻击者可以获得敏感信息或者操作数据库。 Elkagroup Image Gallery 1.0 目前没有解决方案提供： http://www.elkagroup.com/...
CVE-2007-3461: Undefined Security Weakness
SQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter...
CVE-2005-4016
SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the 1 propertyid, 2 zipcode, 3 propertytypeid, 4 price, and 5 cityid parameters to property.php...