CVE-2008-3861

2008-08-2916:22:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.5%

JSON

Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in pages.php and (2) the price_max parameter in search.php.

References

secunia.com/advisories/31613

securityreason.com/securityalert/4198

www.securityfocus.com/bid/30862

exchange.xforce.ibmcloud.com/vulnerabilities/44720

www.exploit-db.com/exploits/6320