Open-Realty Search.inc.PHP SQL Injection Vulnerability

Bugtraq ID:	18545
Class:	Input Validation Error
CVE:	CVE-2006-3148
Remote:	Yes
Local:	No
Published:	Jun 20 2006 12:00AM
Updated:	Feb 11 2008 08:56PM
Credit:	r0t is credited with the discovery of this vulnerability.
Vulnerable:	Open-Realty Open-Realty 2.3.1 Open-Realty Open-Realty 2.3
Not Vulnerable:	Open-Realty Open-Realty 2.3.4

Open-Realty Search.inc.PHP SQL Injection Vulnerability

Open-Realty is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in SQL queries.

A successful exploit could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

Open-Realty Search.inc.PHP SQL Injection Vulnerability

Attackers may exploit this issue through a browser.

Open-Realty Search.inc.PHP SQL Injection Vulnerability

Solution:
The vendor has addressed this issue in Open-Realty 2.3.4 and later.


Open-Realty Open-Realty 2.3

• Open-Realty open-realty2.4.4.zip
  http://open-realty.org/release/open-realty2.4.4.zip

Open-Realty Open-Realty 2.3.1

• Open-Realty open-realty2.4.4.zip
  http://open-realty.org/release/open-realty2.4.4.zip

Open-Realty Search.inc.PHP SQL Injection Vulnerability

References:

• Open-Realty SQL injection vuln. (r0t)
  
• Open-Realty Web Site (Open-Realty)