CVE-2010-4782

Summary

Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) city, (2) state, (3) country, (4) minprice, (5) maxprice, (6) bed, and (7) bath parameters, different vectors than CVE-2006-6807.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/23506
• http://www.exploit-db.com/exploits/15661
• http://packetstormsecurity.org/files/view/96305/anandarealestate-sql.txt
• http://securityreason.com/securityalert/8185
• http://www.securityfocus.com/bid/45146

References

• http://secunia.com/advisories/23506
• http://www.exploit-db.com/exploits/15661
• http://packetstormsecurity.org/files/view/96305/anandarealestate-sql.txt
• http://securityreason.com/securityalert/8185
• http://www.securityfocus.com/bid/45146

• ←Previous
• Next→