SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and previous versions allows remote malicious users to execute arbitrary SQL commands via the mls parameter.
source: wwwsecurityfocuscom/bid/15714/info
Relative Real Estate Systems is prone to an SQL injection vulnerability
This issue is due to a failure in the application to properly sanitize user-supplied input to the 'indexphp' script before using it in an SQL query
This vulnerability could permit remote attackers to pass malicious input ...