CVE-2009-1658 - Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user (username) and (2) password parameters

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user (username) and (2) password parameters

Published May 17, 2009

7.5

HIGH

CVSS 2.0

EPSS 2.05%

Description

Multiple SQL injection vulnerabilities in admin/admin.php in Realty Webware Technologies Realty Web-Base 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user (username) and (2) password parameters. NOTE: some of these details are obtained from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (6)

http://osvdb.org/54372
vdb-entryx_refsource_OSVDBExploit
http://secunia.com/advisories/35033
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34886
vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1653
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50399
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8643
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://osvdb.org/54372		vdb-entryx_refsource_OSVDBExploit
http://secunia.com/advisories/35033		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/34886		vdb-entryx_refsource_BIDExploit
https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-1653		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/50399		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8643		exploitx_refsource_EXPLOIT-DB