SQL Injection in Freerealty.rwcinc Free Realty
CVE-2010-1708
Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter).
Vulnerability class: SQL Injection
EPSS: 0.010 (58.2th percentile) — read the EPSS interpretation.
Affected products
- Freerealty.rwcinc Free_realty — versions 2.6.1, 2.8.3, 2.9-0.7
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_XF)