CVE-2017-15991

2017-10-3107:00:00

mitre

www.cve.org

9.8 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.7%

JSON

Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or searchResidential.php via the property_type, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and CVE-2012-0982.