CVE-2010-1654 | BDVDB-2026-41519 Detail

Description#

Multiple SQL injection vulnerabilities in system_member_login.php in Infocus Real Estate Enterprise Edition allow remote attackers to execute arbitrary SQL commands via the (1) username (aka login) and (2) password parameters. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://packetstormsecurity.org/1004-exploits/ireee-sql.txt
http://secunia.com/advisories/39625
http://www.vupen.com/english/advisories/2010/1014
http://www.exploit-db.com/exploits/12415
http://www.securityfocus.com/bid/39731

Exploit#

http://www.exploit-db.com/exploits/12415

History#

Version 12010-04-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.