CVE-2012-6585

Cross-site scripting XSS vulnerability in search.php in MYRE Realty Manager allows remote attackers to inject arbitrary web script or HTML via the catid1 parameter...

CVE-2012-6584

Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands via the bathrooms1 parameter to 1 demo2/search.php or 2 search.php...

CVE-2012-6585

CVE-2012-6585 : Cross-site scripting (XSS) in MYRE Realty Manager’s search.php allows remote attackers to inject arbitrary script via the cat_id1 parameter. Affected: MYRE Realty Manager, component: search.php, parameter: cat_id1. Exploitability: remote, no authentication; impact: partial integri...

CVE-2012-6584

CVE-2012-6584 concerns multiple SQL injection vulnerabilities in the MYRE Realty Manager application. The flaw allows remote attackers to execute arbitrary SQL commands through the bathrooms1 parameter in either demo2/search.php or search.php. The vulnerability is due to improper input handling i...

Open-Realty CMS 3.x | Cross Site Request Forgery (CSRF) Vulnerability

OVERVIEW Open-Realty CMS 3.x versions are vulnerable to Cross Site Request Forgery. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Open-Realty CMS 3.x | Persistent Cross Site Scripting (XSS) Vulnerability

OVERVIEW Open-Realty CMS 3.x versions are vulnerable to Persistent Cross Site Scripting XSS. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Open-Realty CMS 3.x Cross Site Scripting

OVERVIEW Open-Realty CMS 3.x versions are vulnerable to Persistent Cross Site Scripting XSS. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Open-Realty CMS 3.x Cross Site Request Forgery

OVERVIEW Open-Realty CMS 3.x versions are vulnerable to Cross Site Request Forgery. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

WordPress WP-Realty 插件'language'参数本地文件包含漏洞

BUGTRAQ ID: 56780 WordPress WP-Realty是房地产插件。 WordPress的WP-Realty插件存在本地文件包含漏洞，攻击者可利用此漏洞查看文件并在Web服务器进程中执行本地脚本。 0 WordPress WP-Realty 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 暂停使用WordPress WP-Realty插件。 厂商补丁： WordPress --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://wordpress.org/...

Open-Realty CMS 2.5.8 (2.x.x) <= Cross Site Request Forgery (CSRF) Vulnerability

OVERVIEW Open-Realty 2.5.8 and lower versions are vulnerable to Cross Site Request Forgery. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Open-Realty 2.5.8 Cross Site Request Forgery Vulnerability

Open-Realty versions 2.5.8 and below suffer from a cross site request forgery vulnerability. Open-Realty 2.5.8 Cross Site Request Forgery Vulnerability 1. OVERVIEW Open-Realty 2.5.8 and lower versions are vulnerable to Cross Site Request Forgery. 2. BACKGROUND Open-Realty is the world's leading...

Open-Realty 2.5.8 Cross Site Request Forgery

OVERVIEW Open-Realty 2.5.8 and lower versions are vulnerable to Cross Site Request Forgery. 2. BACKGROUND Open-Realty is the world's leading real estate listing marketing and management CMS application, and has enjoyed being the real estate web site software of choice for professional web site...

Open-Realty 2.5.8 - Cross-Site Request Forgery

Open-Realty 2.5.8 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/56580/info Open-Realty is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain unauthorized administrative actions and gain access to the...

Open-Realty 2.5.8 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/56580/info Open-Realty is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain unauthorized administrative actions and gain access to the affected application. Other attacks are also...

MYRE Realty Manager XSS / SQL Injection

Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me ---------------------------------------------------------------------------------- SQL...

MYRE Realty Manager - Multiple Vulnerabilities

MYRE Realty Manager - Multiple Vulnerabilities Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me...

MYRE Realty Manager - Multiple Vulnerabilities

Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me ---------------------------------------------------------------------------------- SQL...

MYRE Realty Manager Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title:MYRE Realty Manager Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/demo2/ Tested on: Windows 7 Blog: d3b4g.me...

Open-Realty 2.5.6 Local File Inclusion

Exploit Title: Open-Realty v2.5.6 Local File Inclusion Vulnerability Date: 06/10/2012 Author: L0n3ly-H34rT Contact: [email protected] My Site: http://se3c.blogspot.com/ Vendor Link: http://www.open-realty.org/ Software Link: http://www.open-realty.org/release/open-realty2.5.6.zip Version:...

Open Realty - 'select_users_lang' Local File Inclusion

source: https://www.securityfocus.com/bid/55834/info Open Realty is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information or to execute arbitrary local scripts i...