CVE-2008-6796

CVE-2008-6796

EPSS 1.0%

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field).

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://exchange.xforce.ibmcloud.com/vulnerabilities/46394 https://www.exploit-db.com/exploits/7008 http://www.securityfocus.com/bid/32134 http://www.vupen.com/english/advisories/2008/3026