CVE-2008-6796

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field).

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2009-05-07

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Pre Real Estate Listings (Preprojects)

References

• http://www.securityfocus.com/bid/32134
• http://www.vupen.com/english/advisories/2008/3026
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46394
• https://www.exploit-db.com/exploits/7008