NuytsTech Security

CVE-2008-4328

by ·

SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the (1) item, (2) search_ordermethod, and (3) search_order parameters.

Date published : 2008-09-30

http://www.securityfocus.com/bid/31401

http://www.securityfocus.com/archive/1/496744/100/0/threaded

Tags: