CVE-2010-1708

CVE-2010-1708

EPSS 1.0%

Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter).

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/58193 http://www.exploit-db.com/exploits/12411 http://www.securityfocus.com/bid/39712