7.5high
CVE-2008-70301 exploit
Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1) us…
Published 17 y ago · modified 4 mo ago · JSON
CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
1.0%
percentile 62%
Public exploits
1
Exploit-DB
Summary
Multiple SQL injection vulnerabilities in Site2Nite Real Estate Web allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password field to an unspecified component, possibly agentlist.asp. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.
Exploit prediction (EPSS)
0.97% probability of exploitation in the next 30 days, higher than 62% of all scored CVEs.
Exploits and detections
- EDB-31191 Site2Nite Real Estate Web - 'agentlist.asp' Multiple SQL Injections · webapps · 2008-02-13
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Classification
- Weakness
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command
References
- osvdb.org /51076 · vdb-entry, x_refsource_OSVDB, x_transferred
- securityfocus.com /archive/1/488070/100/200/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/27779 · vdb-entry, x_refsource_BID, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/40509 · vdb-entry, x_refsource_XF, x_transferred
Sources
- CVE List: CVE-2008-7030
- NVD: CVE-2008-7030
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.