Itech Real Estate Script search_property.php sql injection

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/search_property.php. The manipulation of the argument property_for leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

SQL命令中使用的特殊元素转义处理不恰当(SQL注入)

Ambit Technologies iTech Real Estate Script SQL注入漏洞

Ambit Technologies iTech Real Estate Script是印度Ambit Technologies公司的一个智能的 PHP 脚本。可以使用编辑选项列出待售和出租物业以编辑物业详细信息。 Ambit Technologies iTech Real Estate Script 3.12版本存在SQL注入漏洞，该漏洞源于不安全的文件/real-estate-script/search_property.php存在未知功能，攻击者利用该漏洞可以远程发起攻击。

N/A

N/A