SQL injection vulnerability in realestate20/loginaction.php in NetArt Media Real Estate Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the Password parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
Link | Resource |
---|---|
http://osvdb.org/60866 | |
http://secunia.com/advisories/37633 | Vendor Advisory |
Configurations
Information
Published : 2010-01-14 11:30
Updated : 2011-08-07 21:00
NVD link : CVE-2009-4613
Mitre link : CVE-2009-4613
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
netartmedia
- real_estate_portal