Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
real estate vulnerabilities and exploits
(subscribe to this query)
9.8
CVSSv3
CVE-2022-28410
Simple Real Estate Portal System v1.0 exists to contain a SQL injection vulnerability via /reps/classes/Users.php?f=delete_agent.
Simple Real Estate Portal System Project Simple Real Estate Portal System 1.0
9.8
CVSSv3
CVE-2022-28028
Simple Real Estate Portal System v1.0 exists to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_amenity.
Simple Real Estate Portal System Project Simple Real Estate Portal System 1.0
9.8
CVSSv3
CVE-2022-28030
Simple Real Estate Portal System v1.0 exists to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_estate.
Simple Real Estate Portal System Project Simple Real Estate Portal System 1.0
5.3
CVSSv3
CVE-2018-16457
PHP Scripts Mall Open Source Real-estate Script 3.6.2 allows remote malicious users to list the wp-content/themes/template_dp_dec2015/img directory.
Open Source Real-estate Script Project Open Source Real-estate Script 3.6.2
5.4
CVSSv3
CVE-2018-6796
PHP Scripts Mall Multilanguage Real Estate MLM Script 3.0 has Stored XSS via every profile input field.
Multilanguage Real Estate Mlm Script Project Multilanguage Real Estate Mlm Script 3.0
NA
CVE-2008-6930
Unrestricted file upload vulnerability in PHPStore Real Estate allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension as a logo, then accessing it via a direct request to the file in realty/re_images/.
Phpstore Real Estate
1 EDB exploit
6.5
CVSSv3
CVE-2023-6139
The Essential Real Estate WordPress plugin prior to 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Denial of Service attacks.
G5plus Essential Real Estate
8.8
CVSSv3
CVE-2023-6140
The Essential Real Estate WordPress plugin prior to 4.4.0 does not prevent users with limited privileges on the site, like subscribers, from momentarily uploading malicious PHP files disguised as ZIP archives, which may lead to remote code execution.
G5plus Essential Real Estate
5.4
CVSSv3
CVE-2023-6141
The Essential Real Estate WordPress plugin prior to 4.4.0 does not apply proper capability checks on its AJAX actions, which among other things, allow attackers with a subscriber account to conduct Stored XSS attacks.
G5plus Essential Real Estate
8.8
CVSSv3
CVE-2023-6827
The Essential Real Estate plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation on the 'ajaxUploadFonts' function in versions up to, and including, 4.3.5. This makes it possible for authenticated attackers with subscriber-...
G5plus Essential Real Estate
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4367
CVE-2024-3611
CVE-2024-4947
CVE-2024-32988
CVE-2020-35165
local file inclusion
CVE-2024-4980
bypass
malicious code
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »