CVE-2015-20121

Mô tả

Tham khảo

• zeroscience.mk/en/vulnerabilities/ZSL-2015-5270.php · Exploit
• exploit-db.com/exploits/38497 · Exploit
• vulncheck.com/advisories/realtyscript-sql-injection-via-u-id-and-agent-parameters · Third Party Advisory

Lỗ hổng khác của realtyscript

• CVE-2015-20120NGHIÊM TRỌNG 9.8Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers…
• CVE-2015-20119TRUNG BÌNH 5.4Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject ma…
• CVE-2015-20118TRUNG BÌNH 6.1Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin loca…
• CVE-2015-20117CAO 8.8Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create u…
• CVE-2015-20116TRUNG BÌNH 6.1Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize CSV file uploads, allowing attackers to inject malicious scripts through f…