CVE-2010-1708

CVE-2010-1708

EPSS 1.0%

Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter).

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/58193 http://www.exploit-db.com/exploits/12411 http://www.securityfocus.com/bid/39712