RSS   Vulnerabilities for 'Com properties'   RSS

2010-05-12
 
CVE-2010-1875

CWE-22
 

 
Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php. NOTE: some of these details are obtained from third party information.

 
 
CVE-2010-1874

CWE-89
 

 
SQL injection vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to execute arbitrary SQL commands via the aid parameter in an agentlisting action to index.php. NOTE: some of these details are obtained from third party information.

 


Copyright 2019, cxsecurity.com

 

Back to Top