5 matches found
Real Estate 7 < 3.3.5 - Reflected XSS
The theme does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...
CVE-2021-24387
The WP Pro Real Estate 7 WordPress theme before 3.1.1 did not properly sanitise the ctcommunity parameter in its search listing page before outputting it back in it, leading to a reflected Cross-Site Scripting which can be triggered in both unauthenticated or authenticated user context...
Oracle Solution Website - Cross Site Scripting Vulnerabilities
Document Title: =============== Oracle Solution Website - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=370 Release Date: ============= 2012-01-27 Vulnerability Laboratory ID VL-ID:...
Oracle Solution Website - Cross Site Scripting Vulnerabilities
Document Title: =============== Oracle Solution Website - Cross Site Scripting Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=370 Release Date: ============= 2012-01-27 Vulnerability Laboratory ID VL-ID:...
klf-realty [injection sql]
vendor site:http://klf-design.com/ product :klf-realty bug:injection sql risk : medium injection sql : /searchlisting.asp?category='sql /detail.asp?propertyid='sql /searchlisting.asp?agent='sql laurent gaffie & benjamin mosse http://s-a-p.ca/ contact: [email protected]...