Lucene search
HistoryMay 04, 2010 - 4:00 p.m.
CVE-2010-1708
cve-2010-1708
sql injection
free realty
agentadmin.php
remote attackers
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter).
Affected configurations
Node
freerealty.rwcincfree_realtyMatch2.6
ORfreerealty.rwcincfree_realtyMatch2.6.1
ORfreerealty.rwcincfree_realtyMatch2.6.2
ORfreerealty.rwcincfree_realtyMatch2.7pre1
ORfreerealty.rwcincfree_realtyMatch2.7pre2
ORfreerealty.rwcincfree_realtyMatch2.7pre3
ORfreerealty.rwcincfree_realtyMatch2.7pre4
ORfreerealty.rwcincfree_realtyMatch2.7pre5
ORfreerealty.rwcincfree_realtyMatch2.7pre6
ORfreerealty.rwcincfree_realtyMatch2.7pre7
ORfreerealty.rwcincfree_realtyMatch2.8
ORfreerealty.rwcincfree_realtyMatch2.8.2
ORfreerealty.rwcincfree_realtyMatch2.8.3
ORfreerealty.rwcincfree_realtyMatch2.8.4
ORfreerealty.rwcincfree_realtyMatch2.8.5
ORfreerealty.rwcincfree_realtyMatch2.8.6
ORfreerealty.rwcincfree_realtyMatch2.8.6pre1
ORfreerealty.rwcincfree_realtyMatch2.8.6pre2
ORfreerealty.rwcincfree_realtyMatch2.8.6pre3
ORfreerealty.rwcincfree_realtyMatch2.8.6-1
ORfreerealty.rwcincfree_realtyMatch2.9pre1
ORfreerealty.rwcincfree_realtyMatch2.9pre2
ORfreerealty.rwcincfree_realtyMatch2.9pre2.1
ORfreerealty.rwcincfree_realtyMatch2.9pre2.2
ORfreerealty.rwcincfree_realtyMatch2.9pre3.0
ORfreerealty.rwcincfree_realtyMatch2.9-0.0
ORfreerealty.rwcincfree_realtyMatch2.9-0.1
ORfreerealty.rwcincfree_realtyMatch2.9-0.2
ORfreerealty.rwcincfree_realtyMatch2.9-0.3
ORfreerealty.rwcincfree_realtyMatch2.9-0.4
ORfreerealty.rwcincfree_realtyMatch2.9-0.5
ORfreerealty.rwcincfree_realtyMatch2.9-0.7
ORfreerealty.rwcincfree_realtyMatch2.9-0.7.1
ORfreerealty.rwcincfree_realtyMatch2.9-0.7.2
ORfreerealty.rwcincfree_realtyMatch2.9-0.7.3
ORfreerealty.rwcincfree_realtyMatch2.9-0.7.4
ORfreerealty.rwcincfree_realtyMatch3.0-0rc1
ORfreerealty.rwcincfree_realtyMatch3.0-0rc2
ORfreerealty.rwcincfree_realtyMatch3.0-0rc3
ORfreerealty.rwcincfree_realtyMatch3.0-0rc4
ORfreerealty.rwcincfree_realtyMatch3.0-0rc5
ORfreerealty.rwcincfree_realtyMatch3.0-0rc6
ORfreerealty.rwcincfree_realtyMatch3.0-0rc7
Related
cvelist
cvelist
CVE-2010-1708
2010-05-04 15:00:00
nvd
nvd
CVE-2010-1708
2010-05-04 16:00:35
prion
prion
Sql injection
2010-05-04 16:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.9 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
28.0%
Related for CVE-2010-1708