CVE-2008-7030

Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.97% chance of exploitation in the next 30 days, 60th percentile

Published

2009-08-24

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/488070/100/200/threaded

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/31191

References

• CVE Record
• NVD entry

Related

• CVE-2008-7028
• CVE-2008-7031
• CVE-2008-7027
• CVE-2008-7032
• CVE-2008-7026
• CVE-2008-7033