cve/2008/CVE-2008-3185.md

CVE-2008-3185

Description

SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action.

POC

Reference

• http://e-rdc.org/v1/news.php?readmore=101
• http://securityreason.com/securityalert/4002
• https://www.exploit-db.com/exploits/5924

Github

No PoCs found on GitHub currently.