Lucene search
HistoryMay 07, 2009 - 5:30 p.m.
CVE-2008-6796
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.001
Percentile
33.1%
SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field).
Affected configurations
Node
preprojectspre_real_estate_listings
| Vendor | Product | Version | CPE |
|---|---|---|---|
| preprojects | pre_real_estate_listings | * | cpe:2.3:a:preprojects:pre_real_estate_listings:*:*:*:*:*:*:*:* |
Related
prion
prion
Sql injection
2009-05-07 17:30:00
exploitdb
exploitdb
Pre Real Estate Listings - Authentication Bypass
2008-11-05 00:00:00
cvelist
cvelist
CVE-2008-6796
2009-05-07 17:00:00
cve
cve
CVE-2008-6796
2009-05-07 17:30:04
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.4
Confidence
Low
EPSS
0.001
Percentile
33.1%
Related for NVD:CVE-2008-6796