Show filters
110 Total Results
Displaying 81-90 of 110
Sort by:
Attacker Value
Unknown
CVE-2008-7052
Disclosure Date: August 24, 2009 (last updated October 04, 2023)
Unrestricted file upload vulnerability in profile.php in Pre Projects Pre Real Estate Listings allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a profile logo, then accessing it via a direct request to the file in re_images/.
0
Attacker Value
Unknown
CVE-2008-7030
Disclosure Date: August 24, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.
0
Attacker Value
Unknown
CVE-2008-6930
Disclosure Date: August 11, 2009 (last updated October 04, 2023)
Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in realty/re_images/.
0
Attacker Value
Unknown
CVE-2008-6818
Disclosure Date: June 01, 2009 (last updated October 04, 2023)
Mole Group Real Estate Script 1.1 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
0
Attacker Value
Unknown
CVE-2008-6798
Disclosure Date: May 07, 2009 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field).
0
Attacker Value
Unknown
CVE-2008-6796
Disclosure Date: May 07, 2009 (last updated October 04, 2023)
SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field).
0
Attacker Value
Unknown
CVE-2008-6293
Disclosure Date: February 26, 2009 (last updated October 04, 2023)
admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie to "admin."
0
Attacker Value
Unknown
CVE-2008-6042
Disclosure Date: February 03, 2009 (last updated October 04, 2023)
SQL injection vulnerability in the re_search module in NetArtMedia Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the ad parameter to index.php.
0
Attacker Value
Unknown
CVE-2008-6009
Disclosure Date: January 30, 2009 (last updated October 04, 2023)
SG Real Estate Portal 2.0 allows remote attackers to bypass authentication and gain administrative access by setting the Auth cookie to 1.
0
Attacker Value
Unknown
CVE-2008-6011
Disclosure Date: January 30, 2009 (last updated October 04, 2023)
SQL injection vulnerability in index.php in SG Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the page_id parameter.
0
