CVE-2002-2305

The connected records confirm a concrete vulnerability: SQL injection in Immobilier’s agentadmin.php, exploitable via the (1) agentname or (2) agentpassword parameters. This allows remote attackers to execute arbitrary SQL commands. Per the CVSS data, impact includes partial confidentiality, part...