high7.5Public exploit code
CVE-2010-2357
SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL commands via the p_id parame…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP Real Estate Script - SQL Injection2010-06-09 · webapps · php · Verified
Impact
SQL injection vulnerability in index.php in Eicra Realestate Script 1.0 and 1.6.0 allows remote attackers to execute arbitrary SQL commands via the p_id parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eicrasoft | Eicra Realestate Script | Versions 1.0, 1.6.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/65412
- http://secunia.com/advisories/40171
- http://www.exploit-db.com/exploits/13802
- http://www.securityfocus.com/bid/40748
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59269
- http://osvdb.org/65412
- http://secunia.com/advisories/40171
- http://www.exploit-db.com/exploits/13802
- http://www.securityfocus.com/bid/40748
- https://exchange.xforce.ibmcloud.com/vulnerabilities/59269