CVE-2007-6472 Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 allow (1) remote attackers to execute arbitrary SQL commands via the type parameter to search.php and (2) remote authenticated adminis...
HighCVSS 7.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 allow (1) remote attackers to execute arbitrary SQL commands via the type parameter to search.php and (2) remote authenticated administrators to execute arbitrary SQL commands via the listing_updated_days parameter to admin/findlistings.php. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phpmyrealty | = 1.0.9 | No fix listed |
References
- 28155 third-party-advisory vendor-advisory
- 39267 vdb-entry
- 26932 vdb-entry
- phpmyrealty-search-sql-injection(39121) vdb-entry
- phpmyrealty-findlistings-sql-injection(39122) vdb-entry
- 4750 exploit