Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.
References
Configurations
History
No history.
Information
Published : 2009-08-24 10:30
Updated : 2024-02-28 11:21
NVD link : CVE-2008-7030
Mitre link : CVE-2008-7030
CVE.ORG link : CVE-2008-7030
JSON object : View
Products Affected
site2nite
- real_estate_web
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')