CVE-2008-4328

SQL injection vulnerability in sitesearch.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the 1 item, 2 searchordermethod, and 3 searchorder parameters...

CVE-2008-4328

CVE-2008-4328 describes an SQL injection vulnerability in EasyRealtorPRO 2008 affecting site_search.php. The flaw allows remote attackers to inject arbitrary SQL through the input parameters (1) item, (2) search_ordermethod, and (3) search_order, leading to potentially unauthorized data access or...