Vulnerabilities

TI-2006-03067 CVE-2006-3167 · GHSA-6265-r5jg-4h87

Free Realty before 2.9 allows remote attackers to obtain the full path and other…

LOW 25

Free Realty before 2.9 allows remote attackers to obtain the full path and other sensitive information via unspecified manipulations that produce an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01184 Published 2006-06-22 No fix listed

TI-2006-03066 CVE-2006-3166 · GHSA-m94m-9hqq-qw9g

Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and…

LOW 22

Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and earlier allows remote attackers to execute arbitrary web script or HTML via the sort parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0094 Published 2006-06-22 No fix listed

TI-2006-03065 CVE-2006-3165 · GHSA-gxxf-cv5g-66fm

SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows…

LOW 36

SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01337 Published 2006-06-22 No fix listed

Vulnerabilities

Filters

Free Realty before 2.9 allows remote attackers to obtain the full path and other…

Cross-site scripting (XSS) vulnerability in propview.php in Free Realty 2.9-0.6 and…

SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows…