PT-2018-17507 · Unknown · Multilanguage Real Estate Mlm Script

Ihsan Sencan · Publicado 2018-01-29 · Atualizado 2018-02-14 · CVE-2018-6364

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Multilanguage Real Estate MLM Script versions prior to 3.0

Description The issue exists due to SQL Injection in the /product-list.php API endpoint, specifically via the srch parameter.

Recommendations For versions prior to 3.0, update to version 3.0 or later to resolve the issue.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-6364

Produtos afetados

Multilanguage Real Estate Mlm Script

Referências · 4

• 🔥 https://exploit-db.com/exploits/43917 · Exploit
• 🔥 https://packetstormsecurity.com/files/146130/Multilanguage-Real-Estate-MLM-Script-3.0-SQL-Injection.html · Exploit
• https://osv.dev/vulnerability/CVE-2018-6364 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-6364 · Nota de Segurança