Abarcar Realty Portal Content.PHP SQL Injection Vulnerability
BID:18218
CVE-2006-2853 |Info
Abarcar Realty Portal Content.PHP SQL Injection Vulnerability
| Bugtraq ID: | 18218 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-2853 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 01 2006 12:00AM |
| Updated: | Feb 20 2007 11:36PM |
| Credit: | SpC-x credited with the discovery of this vulnerability. |
| Vulnerable: |
abarcar Realty Portal Realty Portal 5.1.5 |
| Not Vulnerable: |
abarcar Realty Portal System 7.2 abarcar Realty Portal System 7.1 abarcar Realty Portal System 7.0 |
Discussion
Abarcar Realty Portal Content.PHP SQL Injection Vulnerability
Abarcar Realty Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Abarcar Realty Portal is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query.
A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database implementation.
Exploit / POC
Abarcar Realty Portal Content.PHP SQL Injection Vulnerability
This issue can be exploited through a web client.
The following proof-of-concept URI is available:
This issue can be exploited through a web client.
The following proof-of-concept URI is available:
Solution / Fix
Abarcar Realty Portal Content.PHP SQL Injection Vulnerability
Solution:
This issue has been addressed by the vendor as of version 7.0. Please contact the vendor for information on how to obtain an updated version.
Solution:
This issue has been addressed by the vendor as of version 7.0. Please contact the vendor for information on how to obtain an updated version.