CVE-2008-3185 SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action.
MediumCVSS 6.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| vclcomponents relative real estate systems | <= 3.0 | No fix listed |
References
- e-rdc.org exploit
- 4002 third-party-advisory
- 20080625 [ECHO_ADV_99$2008] Relative Real Estate Systems <= 3.0 (listing_id) Sql Injection Vulnerability mailing-list
- 29915 exploit vdb-entry
- ADV-2008-1926 vdb-entry
- rres-listingid-sql-injection(43316) vdb-entry
- 5924 exploit