sunbeltrealty.co XSS vulnerability

Vulnerable URL: http://www.sunbeltrealty.co/listingresults.asp Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check sunbeltrealty.c...

Mail.ru: [realty.mail.ru] XSS, SSI Injection

XSS === PoC Открыть с помощью Internet Explorer https://blackfan.ru/x?r=https://realty.mail.ru/%22--%3e%3csvg/onload=alertdocument.domain%3e/%252e%252e Request GET /"--/.. HTTP/1.1 Host: realty.mail.ru Connection: close SSI Injection === PoC Request-URI также попадает в SSI код GET //"-- HTTP/1.1...

madisoncountyrealty.com XSS vulnerability

Vulnerable URL: http://www.madisoncountyrealty.com/listings.php?listingtype=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 4679971...

jp-realty.com XSS vulnerability

Vulnerable URL: http://www.jp-realty.com/index.jsp?tt=1=0&p1;=0&p2;=0&p3;=0&p4;=0&p5;=0&p6;=0&p7;=0=1%22--%3E%3Csvg/onload=;prompt/OPENBUGBOUNTY/;%3E=1 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

kinsalepropertygroup.com XSS vulnerability

Vulnerable URL: http://kinsalepropertygroup.com/wp-content/plugins/Realty/display/elements/formcontactagent.php?userid="alert/OPENBUGBOUNTY/...

nepsite.ru XSS vulnerability

Vulnerable URL: http://www.nepsite.ru/realty/search/?categoryalias=66110648684d5389588431a0bf627ca5id=3btw36=btw36=btwsqrm8=btwsqrm8=btwsqrm9=btwsqrm9=btwsqrm10=btwsqrm10==%22%3E%3Csvg+onload%3Dalert%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:|...

madisonprorealty.com XSS vulnerability

Vulnerable URL: http://www.madisonprorealty.com/search.html?sitesearchresults1=%3C/script%3E%3Cscript%3Ealert%28%27XSSPOSED%27%29%3C/script%3E=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

WordPress Realty Plugin - Reflected Cross Site Scripting

This plugin is prone to a indexext.php listingid parameter reflected cross site scripting vulnerability. Solution Update the plugin...

WP Realty - MySQL Time Based Injection

The wp-realty WordPress plugin was affected by a MySQL Time Based Injection security vulnerability...

WP Realty - index_ext.php listing_id Parameter Reflected XSS

The wp-realty WordPress plugin was affected by an indexext.php listingid Parameter Reflected XSS security vulnerability...

Abarcar Realty Portal 5.1.5/6.0.1 - Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/20970/info Abarcar Realty Portal is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow ...

Free Realty 3.1-0.6 - Multiple Vulnerabilities

No description provided by source...

Abarcar Realty Portal 5.1.5 Content.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/18218/info Abarcar Realty Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit...

Klf-Realty 2.0 search_listing.asp Multiple Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21199/info Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

MYRE Realty Manager Multiple Vulnerabilities

No description provided by source. Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me...

Open Realty 2.x and 3.x Persistent XSS Vulnerability

No description provided by source...

Open-Realty 2.5.7 - Local File Disclosure Vulnerability

No description provided by source. ?php / Exploit Title: Date: 2010-08-18 Author: Nikola Petrov Vendor: http://open-realty.org/ Version: 2.5.7 / / vulnerable: Open-Realty 2.5.7 LFI: /index.php upload image with: ?php systemecho ?php ifisset$GET\cmd\ system$GET\cmd; ?\ sh.php; ? include the...

Klf-Realty 2.0 detail.asp property_id Parameter SQL Injection

No description provided by source. source: http://www.securityfocus.com/bid/21199/info Klf-Realty is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to...

YPNinc PHP Realty Script (docID) SQL Injection Vulnerability

No description provided by source. / / / \ \ \ \ \ / / \\ \ \ \ \ // /// \ \ / / \ //|\ / \ \ \ \ \ \ / / \ \ / / \ | | | \ | | || | | |/ / \ V / || |\ V / / \ | / \ | /| | | || / | | | | . | ' || / | || // \ // \|||/|||||||||\ .WEB.ID...

Open-Realty <= 2.4.3 (last_module) Remote Code Execution Exploit

No description provided by source. !/usr/bin/perl Vendor url: www.open-realty.org note: exploit requires Registerglobals = On in php.ini Iron http://www.randombase.com require LWP::UserAgent; print Open-Realty = 2.4.3 Remote Code Execution exploit By Iron - randombase.com Greets to everyone at...