Skip to content
OpenAdvisories

Product · Next Click Ventures

RealtyScript

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.2
    CVE-2015-20120

    RealtyScript 4.0.2 Multiple Time-based Blind SQL Injection

    Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers to extract database information by injecting SQL code into application parameters. Attackers can craft requests with t…

    Next Click Ventures RealtyScript
  • High 7.2
    CVE-2015-20118

    RealtyScript 4.0.2 Stored Cross-Site Scripting via location_name Parameter

    Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface. Attackers can submit POST requests to the locations.php endpoint with JavaScript payloads in the locat…

    Next Click Ventures RealtyScript
  • High 7.2
    CVE-2015-20115

    RealtyScript 4.0.2 Stored Cross-Site Scripting via File Upload Parameter

    Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php. Attackers can upload files containing JavaScript code that executes in the contex…

    Next Click Ventures RealtyScript