CVE-2010-1708

EUVD-2010-1728
Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter).
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 56%
Affected Products (NVD)
VendorProductVersion
freerealty.rwcincfree_realty
2.6
freerealty.rwcincfree_realty
2.6.1
freerealty.rwcincfree_realty
2.6.2
freerealty.rwcincfree_realty
2.7:pre1
freerealty.rwcincfree_realty
2.7:pre2
freerealty.rwcincfree_realty
2.7:pre3
freerealty.rwcincfree_realty
2.7:pre4
freerealty.rwcincfree_realty
2.7:pre5
freerealty.rwcincfree_realty
2.7:pre6
freerealty.rwcincfree_realty
2.7:pre7
freerealty.rwcincfree_realty
2.8
freerealty.rwcincfree_realty
2.8.2
freerealty.rwcincfree_realty
2.8.3
freerealty.rwcincfree_realty
2.8.4
freerealty.rwcincfree_realty
2.8.5
freerealty.rwcincfree_realty
2.8.6
freerealty.rwcincfree_realty
2.8.6:pre1
freerealty.rwcincfree_realty
2.8.6:pre2
freerealty.rwcincfree_realty
2.8.6:pre3
freerealty.rwcincfree_realty
2.8.6-1
freerealty.rwcincfree_realty
2.9:pre1
freerealty.rwcincfree_realty
2.9:pre2
freerealty.rwcincfree_realty
2.9:pre2.1
freerealty.rwcincfree_realty
2.9:pre2.2
freerealty.rwcincfree_realty
2.9:pre3.0
freerealty.rwcincfree_realty
2.9-0.0
freerealty.rwcincfree_realty
2.9-0.1
freerealty.rwcincfree_realty
2.9-0.2
freerealty.rwcincfree_realty
2.9-0.3
freerealty.rwcincfree_realty
2.9-0.4
freerealty.rwcincfree_realty
2.9-0.5
freerealty.rwcincfree_realty
2.9-0.7
freerealty.rwcincfree_realty
2.9-0.7.1
freerealty.rwcincfree_realty
2.9-0.7.2
freerealty.rwcincfree_realty
2.9-0.7.3
freerealty.rwcincfree_realty
2.9-0.7.4
freerealty.rwcincfree_realty
3.0-0:rc1
freerealty.rwcincfree_realty
3.0-0:rc2
freerealty.rwcincfree_realty
3.0-0:rc3
freerealty.rwcincfree_realty
3.0-0:rc4
freerealty.rwcincfree_realty
3.0-0:rc5
freerealty.rwcincfree_realty
3.0-0:rc6
freerealty.rwcincfree_realty
3.0-0:rc7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt
http://www.exploit-db.com/exploits/12411
http://www.securityfocus.com/bid/39712
https://exchange.xforce.ibmcloud.com/vulnerabilities/58193
http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt
http://www.exploit-db.com/exploits/12411
http://www.securityfocus.com/bid/39712
https://exchange.xforce.ibmcloud.com/vulnerabilities/58193