CVE-2010-4782 Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) city, (2) state...
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) city, (2) state, (3) country, (4) minprice, (5) maxprice, (6) bed, and (7) bath parameters, different vectors than CVE-2006-6807.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softwebsnepal ananda real estate | = 3.4 | No fix listed |
References
- packetstormsecurity.org exploit
- 23506 third-party-advisory vendor-advisory
- 8185 third-party-advisory
- 15661 exploit
- 45146 exploit vdb-entry