CVE

Id
33302  
CVE No.
CVE-2008-3185  
Status
Candidate  
Description
SQL injection vulnerability in index.php in Relative Real Estate Systems 3.0 and earlier allows remote attackers to execute arbitrary SQL commands via the listing_id parameter in a listings action.  
Phase
Assigned (20080715)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
362521 33302 CVE-2008-3185 BUGTRAQ:20080625 [ECHO_ADV_99$2008] Relative Real Estate Systems <= 3.0 (listing_id) Sql Injection Vulnerability  View
362522 33302 CVE-2008-3185 URL:http://www.securityfocus.com/archive/1/archive/1/493663/100/0/threaded  View
362523 33302 CVE-2008-3185 MILW0RM:5924  View
362524 33302 CVE-2008-3185 URL:http://www.milw0rm.com/exploits/5924  View
362525 33302 CVE-2008-3185 MISC:http://e-rdc.org/v1/news.php?readmore=101  View
362526 33302 CVE-2008-3185 BID:29915  View
362527 33302 CVE-2008-3185 URL:http://www.securityfocus.com/bid/29915  View
362528 33302 CVE-2008-3185 VUPEN:ADV-2008-1926  View
362529 33302 CVE-2008-3185 URL:http://www.vupen.com/english/advisories/2008/1926/references  View
362530 33302 CVE-2008-3185 SREASON:4002  View
362531 33302 CVE-2008-3185 URL:http://securityreason.com/securityalert/4002  View
362532 33302 CVE-2008-3185 XF:rres-listingid-sql-injection(43316)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47946 JVNDB-2008-003256 DreamNews Manager の dreamnews-rss.php における SQL インジェクションの脆弱性 DreamNews Manager の dreamnews-rss.php には、SQL インジェクションの脆弱性が存在します。 CVE-2008-3189 33302 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-003256.html  View