critical9.8Public exploit code
CVE-2018-6364
SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Multilanguage Real Estate MLM Script 3.0 - 'srch' SQL Injection2018-01-28 · webapps · php
Impact
SQL Injection exists in Multilanguage Real Estate MLM Script through 3.0 via the /product-list.php srch parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Multilanguage Real Estate Mlm Script Project | Multilanguage Real Estate Mlm Script | through 3.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/146130/Multilanguage-Real-Estate-MLM-Script-3.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/43917/
- https://packetstormsecurity.com/files/146130/Multilanguage-Real-Estate-MLM-Script-3.0-SQL-Injection.html
- https://www.exploit-db.com/exploits/43917/