Secunia

Some vulnerabilities have been reported in Zeeproperty, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks, and by malicious users to compromise a vulnerable system.

1) Input passed to the "adid" parameter in bannerclick.php is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

2) The upload functionality for property images does not properly verify uploaded files. This can be exploited to e.g. upload and execute arbitrary PHP code.

Successful exploitation requires a valid user account.

3) Input passed to the "propid" parameter in view_prop_details.php is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary

Solution
Edit the source code to ensure that input is properly sanitised and verified.

Provided and/or discovered by
1) Hussin X
2, 3) ZoRLu

Changelog
Further details available in Customer Area

Original Advisory
1) http://milw0rm.com/exploits/6780
2, 3) http://milw0rm.com/exploits/7058

Deep Links
Links available in Customer Area