CVE-2010-4782

CVE-2010-4782 describes SQL injection vulnerabilities in Softwebs Nepal (Ananda Real Estate) 3.4 and earlier. The issue affects list.asp and allows remote attackers to execute arbitrary SQL commands via parameters such as city, state, country, minprice, maxprice, bed, and bath (vectors differ fro...