CVE-2008-7030

Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2009-08-24

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Real Estate Web (Site2nite)

References

• http://www.osvdb.org/51076
• http://www.securityfocus.com/archive/1/488070/100/200/threaded
• http://www.securityfocus.com/bid/27779
• https://exchange.xforce.ibmcloud.com/vulnerabilities/40509