medium5.0Public exploit code
CVE-2008-2881
Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Relative Real Estate Systems 3.0 - 'listing_id' SQL Injection2008-06-24 · webapps · php · Verified
Impact
Relative Real Estate Systems 3.0 and earlier stores passwords in cleartext in a MySQL database, which allows context-dependent attackers to obtain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Relative Real Estate Systems | Relative Real Estate Systems | through 3.0 |