CVE-2017-20130 Itech Real Estate Script search_property.php sql injection
CriticalCVSS 9.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/search_property.php. The manipulation of the argument property_for leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| itechscripts real estate script | = 3.12 | No fix listed |
| itech Real Estate Script | = 3.12 | No fix listed |
References
- vuldb.com third-party-advisory
- www.exploit-db.com exploit third-party-advisory vdb-entry