CVE-2008-3861 - Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in pages.php and (2) the price_max parameter in search.php

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in pages.php and (2) the price_max parameter in search.php

Published Aug 29, 2008

7.5

HIGH

CVSS 2.0

EPSS 1.00%

Description

Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in pages.php and (2) the price_max parameter in search.php.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (6)

http://secunia.com/advisories/31613
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/4198
third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/30862
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-3847
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44720
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/6320
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/31613		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/4198		third-party-advisoryx_refsource_SREASON
http://www.securityfocus.com/bid/30862		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-3847		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/44720		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/6320		exploitx_refsource_EXPLOIT-DB