high7.5Public exploit code
CVE-2010-1654
Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL com…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Infocus Real Estate Enterprise Edition Script - Authentication Bypass2010-04-27 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the (1) username (aka login) and (2) password parameters. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Instantrankingseo | Infocus Real Estate | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/1004-exploits/ireee-sql.txt
- http://secunia.com/advisories/39625
- http://www.exploit-db.com/exploits/12415
- http://www.securityfocus.com/bid/39731
- http://www.vupen.com/english/advisories/2010/1014
- http://packetstormsecurity.org/1004-exploits/ireee-sql.txt
- http://secunia.com/advisories/39625
- http://www.exploit-db.com/exploits/12415
- http://www.securityfocus.com/bid/39731
- http://www.vupen.com/english/advisories/2010/1014