7.5
CVSSv2

CVE-2012-4279

Published: 13/08/2012 Updated: 14/08/2012
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote malicious users to execute arbitrary SQL commands via the (1) view parameter to agentdisplay.php or (2) edit parameter to admin/admin.php.

Vulnerable Product Search on Vulmon Subscribe to Product

rwcinc free realty 3.1-0.6

Exploits

Title: ====== Free Reality v31-06 - Multiple Web Vulnerabilities Date: ===== 2012-05-07 References: =========== wwwvulnerability-labcom/get_contentphp?id=513 VL-ID: ===== 513 Common Vulnerability Scoring System: ==================================== 75 Introduction: ============= Free Realty is primarily designed for real esta ...