Browse CVEs

CRITICAL 9.8 CVE-2015-20121 Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by … Realtyscript Mitigation only Fix from $2,3002026-03-16 CRITICAL 9.8 CVE-2015-20120 Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers to extra… Realtyscript Mitigation only Fix from $2,3002026-03-16 HIGH 8.8 CVE-2015-20117 Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create unauthoriz… Realtyscript No fix yet Fix from $1,9502026-03-16 MEDIUM 6.1 CVE-2015-20116 Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize CSV file uploads, allowing attackers to inject malicious scripts through filename p… Realtyscript No fix yet Fix from $1,6002026-03-16 MEDIUM 6.1 CVE-2015-20118 Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations int… Realtyscript No fix yet Fix from $1,6002026-03-16 MEDIUM 5.4 CVE-2015-20119 Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious H… Realtyscript No fix yet Fix from $1,6002026-03-16 MEDIUM 6.1 CVE-2015-20114 Next Click Ventures RealtyScript 4.0.2 contains a cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code … Realtyscript No fix yet Fix from $1,6002026-03-16 MEDIUM 6.1 CVE-2015-20115 Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST p… Realtyscript No fix yet Fix from $1,6002026-03-16