CVE-2008-2443

SQL injection vulnerability in The Real Estate Script’s dpage.php (docID parameter) allows remote attackers to execute arbitrary SQL commands. This is a vulnerability in the Real Estate Script where the docID input is not properly sanitized, enabling potentially partial/complete database impact. ...