CVE-2012-5290

2012-10-0416:00:00

mitre

www.cve.org

8.5 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.0%

JSON

Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL commands via the (1) lstid parameter to listings.php or (2) infoid parameter to index.php.

References

packetstormsecurity.org/files/108342/EasyWebRealEstate-Blind-SQL-Injection.html

exchange.xforce.ibmcloud.com/vulnerabilities/72148