critical9.8Public exploit code
CVE-2017-15991
Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or sear…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vastal I-Tech Agent Zone - 'searchCommercial.php' / 'searchResidential.php' SQL Injection2017-10-30 · webapps · php
Impact
Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or searchResidential.php via the property_type, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and CVE-2012-0982.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vastal | Agent Zone | All versions |