CVE-2007-0196

EPSS 1.2%

SQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier allows remote attackers to execute arbitrary SQL commands via the username field (txtUserName parameter) and possibly other parameters. NOTE: some details were obtained from third party information.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3105unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/32718 http://secunia.com/advisories/23531 https://exchange.xforce.ibmcloud.com/vulnerabilities/31360 https://www.exploit-db.com/exploits/3105 http://www.securityfocus.com/bid/21963 http://www.vupen.com/english/advisories/2007/0143