Skip to content
OpenAdvisories

Vendor

Inoutscripts

6 known vulnerabilities.

Products

Inout EasyRooms Ultimate Edition 4 Inout Article Base CMS 1 Inout RealEstate 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 8.2
    CVE-2019-25640

    Inout Article Base CMS Lastest SQL Injection via portalLogin.php

    Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters. Attackers can inject SQL code using XOR-based payloads in GET requests to portalLogin.php to …

    Inoutscripts Inout Article Base CMS
  • High 8.2
    CVE-2019-25528

    Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

    Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the property1 parameter. Attackers can send POST requests to the search/searchdeta…

    Inoutscripts Inout EasyRooms Ultimate Edition
  • High 8.2
    CVE-2019-25527

    Inout EasyRooms Ultimate Edition v1.0 SQL Injection via searchdetailed

    Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the numguest parameter. Attackers can send POST requests to the search/searchdetai…

    Inoutscripts Inout EasyRooms Ultimate Edition
  • High 8.2
    CVE-2019-25526

    Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

    Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the location parameter. Attackers can send POST requests to the search/searchdetai…

    Inoutscripts Inout EasyRooms Ultimate Edition
  • High 8.2
    CVE-2019-25525

    Inout EasyRooms Ultimate Edition v1.0 SQL Injection via search

    Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the guests parameter. Attackers can send POST requests to the search/rentals endpo…

    Inoutscripts Inout EasyRooms Ultimate Edition
  • High 8.2
    CVE-2019-25479

    Inout RealEstate Lastest SQL Injection via agentlistdetails

    Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the city parameter. Attackers can send POST requests to the agents/agentlistdetails endpoint with malic…

    Inoutscripts Inout RealEstate