medium4.3Public exploit code
CVE-2012-4278
Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) notes para…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Free Realty 3.1-0.6 - Multiple Vulnerabilities2012-05-13 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) notes parameter to (a) admin/agenteditor.php; (2) title, (3) previewdesc, (4) fulldesc, or (5) notes parameter (b) to agentadmin.php or (c) in an addlisting action to agentadmin.php; or unspecified vectors to (d) admin/adminfeatures.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rwcinc | Free Realty | Version 3.1-0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/49132
- http://www.exploit-db.com/exploits/18874
- http://www.securityfocus.com/bid/53491
- http://www.vulnerability-lab.com/get_content.php?id=513
- http://secunia.com/advisories/49132
- http://www.exploit-db.com/exploits/18874
- http://www.securityfocus.com/bid/53491
- http://www.vulnerability-lab.com/get_content.php?id=513