Lucene search
China National Vulnerability DatabaseCNVD-2023-98207HistoryOct 30, 2023 - 12:00 a.m.
Simple Real Estate Portal System SQL Injection Vulnerability (CNVD-2023-98207)
2023-10-3000:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
real estate portal system
sql injection
vulnerability
validation
illegal commands
database theft
Simple Real Estate Portal System is a real estate portal system. A SQL injection vulnerability exists in Simple Real Estate Portal System v1.0, which originates from the parameter id of the file view_estate.php that lacks validation of externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive database data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| simple real estate portal system simple real estate portal system v | eq | 1.0 |
Related
cve
cve
CVE-2023-5805
2023-10-26 22:15:08
nvd
nvd
CVE-2023-5805
2023-10-26 22:15:08
cvelist
cvelist
prion
prion
Sql injection
2023-10-26 22:15:00