CVE-2010-1708

{"id": "CVE-2010-1708", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-05-04T16:00:35.840", "references": [{"url": "http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.exploit-db.com/exploits/12411", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/39712", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58193", "source": "cve@mitre.org"}, {"url": "http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.exploit-db.com/exploits/12411", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/39712", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58193", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter)."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n SQL en agentadmin.php en Free Realty permiten a atacantes remotos ejecutar sentencias SQL de su elecci\u00f3n a trav\u00e9s de (1) campo login (tambi\u00e9n conocido como par\u00e1metro agentname) o (2) campo password (tambi\u00e9n conocido como par\u00e1metro agentpassword)."}], "lastModified": "2024-11-21T01:15:01.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F062FAA5-BBD5-48B0-A488-9F09BB5268F0"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AF21CC5-D438-412E-8C20-0E65FA2EFD74"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CC09D3BA-AEB6-4FD5-8CB8-5BB5B9994D1E"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F9E5C72E-C345-4725-A76F-65D7000EBFC5"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DA295B8A-8426-464F-B51D-ED93D36C466D"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFCA64A6-FF3B-47E9-BE54-9A40F6638006"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6A5BD9D1-BB39-49FC-8238-12DE2BBDB848"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39595D42-9A8F-495C-A6E9-E95471B1F335"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9277B3BC-731E-4E59-BD84-16A9E3A75771"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A94D0484-D432-494C-B78F-C9547B636E84"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40E509FE-BCC1-4494-90A8-4CC1024A10F4"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "99061E09-9431-474F-B42D-8A5C2848C072"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "179124B1-E1D4-492D-9666-A71E1AA082CA"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0BD3BE9-B0D5-45B4-8C0D-7F7B7EFC0A62"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CA24CCD-046A-4D05-9CEF-FB0C582C2C41"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F35B830-C978-4241-A487-93FD1D4B4661"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6:pre1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8E82EEA7-3CCF-475B-B076-07BD26BEAB90"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6:pre2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E95C4907-930D-4709-9207-F65433D108D8"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6:pre3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C659B072-1F16-4732-B863-64104ACF2A6B"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6-1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "56AD076B-0C1E-460B-A9A4-E208B89B50BC"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "539C9500-5A29-45BD-B09E-0F547DB59C35"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "189E852D-F8CB-4E6D-B809-760C6AC6ED11"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre2.1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FB57FB7-2792-4294-A072-737B4E749C0F"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre2.2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05FFF42A-7CB6-4184-98CB-7775D5AD60FD"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre3.0:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D16FF13F-8285-4EEF-9ECC-9737F823926C"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B7F2724-598C-4C97-8FA2-5E8B2015A66C"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF9D0CD5-2A4F-40A0-9B32-F25E0FEBB946"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBA45FC3-8DB4-4B53-B9FD-6EF44C16E4D6"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "564761B5-1511-4054-ADC4-871B7FC71B14"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "71E0C855-9D28-474B-84E5-45F1E9757511"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6B83FBE-0EDF-43F0-89AA-79CD158EAE30"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D95DD2EB-0FF9-48AB-B0CA-ACD60D1B07DA"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F790703-B202-411C-A47A-77FD27545E22"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "19C6DD8B-B224-49F4-8D87-81C7949B33FA"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BD3B13E-6DC5-4E70-A3A8-4334969E2F85"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4CDE1B8E-CB30-4605-9893-8DFA1ED16F8A"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF83E3C3-C561-4D2E-9618-0506A0A8FD4C"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1C451C36-9F45-47FC-99AF-8D05B6D4D1B4"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2BB2FE61-B47A-4C0D-B51F-D172845F36C7"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5260593A-75FF-4184-A9C9-C51FE89E3F84"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86B06823-9B90-4605-B698-5B1E1F14D270"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E3B67D37-C189-49E5-A0E1-24C7241626B4"}, {"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9AD09A44-E492-457F-A60C-A3FC7A5B7C0F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}