Description (CNA)
Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in pages.php and (2) the price_max parameter in search.php.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://securityreason.com/securityalert/4198
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44720
- http://secunia.com/advisories/31613
- https://www.exploit-db.com/exploits/6320
- http://www.securityfocus.com/bid/30862
ADP enrichment
No English description supplied.