CVE-2006-5840

CVE-2006-5840 affects Realty Portal (5.1.x family). The issue enables remote SQL injection via the vulnerable parameters: (1) neid in newsdetails.php and (2) slid in slistl.php, with a related note that slistl.php/slid never existed in any version. Additional entries (CVE-2006-2853, CVE-2006-2853...

CVE-2006-5840

Multiple SQL injection vulnerabilities in Abarcar Realty Portal allow remote attackers to execute arbitrary SQL commands via the 1 neid parameter to newsdetails.php, or the 2 slid parameter to slistl.php. NOTE: the cat vector is already covered by CVE-2006-2853. NOTE: the vendor has notified CVE...

PT-2006-6514

Name of the Vulnerable Software and Affected Versions: Abarcar Realty Portal affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the neid parameter to "newsdetails.php" or the slid parameter to "slistl.php"...

Abarcar Realty Portal [injection sql]

software:Abarcar product:Realty Portal vendor site : http://www.abarcar.com/ risk : medium /newsdetails.php?neid=sql /slistl.php?slid=sql /content.php?cat=sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...

abarcarSQL.txt

software:Abarcar product:Realty Portal vendor site : http://www.abarcar.com/ risk : medium /newsdetails.php?neid=sql /slistl.php?slid=sql /content.php?cat=sql laurent gaffié & benjamin mossé http://s-a-p.ca/ contact: [email protected]...

Abarcar Realty Portal 5.1.56.0.1 - Multiple SQL Injections

Abarcar Realty Portal 5.1.56.0.1 - Multiple SQL Injections source: https://www.securityfocus.com/bid/20970/info Abarcar Realty Portal is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

Abarcar Realty Portal 5.1.5/6.0.1 - Multiple SQL Injections

source: https://www.securityfocus.com/bid/20970/info Abarcar Realty Portal is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

CVE-2006-3148

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...

CVE-2006-3166

Cross-site scripting XSS vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter...

CVE-2006-3167

Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified manipulations that produce an error message...

CVE-2006-3165

SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter...

CVE-2006-3165

SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter...

CVE-2006-3148

SQL injection vulnerability, possibly in search.inc.php, in Open-Realty 2.3.1 allows remote attackers to execute arbitrary SQL commands via the sorttype parameter to index.php...

CVE-2006-3165

CVE-2006-3165 affects Free Realty 2.9-0.7 and earlier, with a SQL injection in propview.php exploitable via the sort parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands, leading to potential data disclosure or modification. Exploit details, affected versions bey...

CVE-2006-3148

The CVE-2006-3148 entry concerns an SQL injection in Open-Realty 2.3.1. The vulnerability affects the application via the sorttype parameter to index.php, with potential arbitrary SQL execution if exploitable. The root cause is a likely improper handling of user input in search.inc.php, as cited ...

CVE-2006-3166

Cross-site scripting XSS vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter...

CVE-2006-3167

Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified manipulations that produce an error message...

CVE-2006-3167

The CVE-2006-3167 vulnerability affects Free Realty before 2.9. The issue arises from unspecified manipulations that produce an error message, allowing remote attackers to obtain the full path and other sensitive information. This is a confidentiality impact (partial) without evidence of data int...

CVE-2006-3166

The CVE-2006-3166 entry describes a Cross-site scripting (XSS) vulnerability in propview.php of Free Realty (versions 2.9-0.6 and earlier). The issue allows remote attackers to cause execution of arbitrary web scripts or HTML by manipulating the sort parameter. Affected component: Free Realty’s p...

CVE-2006-3038

Cross-site scripting XSS vulnerability in index.php in Cescripts Realty Room Rent allows remote attackers to inject arbitrary web script or HTML via the selmenu parameter. NOTE: the vendor notified CVE on 20060823 that "All issues concerning this script and others at cescripts.com have been...