NVD

Id
16020  
Name
CVE-2010-4782  
Description
Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) city, (2) state, (3) country, (4) minprice, (5) maxprice, (6) bed, and (7) bath parameters, different vectors than CVE-2006-6807.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2011-04-07  
Modified Date
2011-09-21  
Seq
2010-4782  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
90621 16020 CVE-2010-4782 http://packetstormsecurity.org/files/view/96305/anandarealestate-sql.txt  View
90622 16020 CVE-2010-4782 8185  View
90623 16020 CVE-2010-4782 15661  View
90624 16020 CVE-2010-4782 45146  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
33756 JVNDB-2011-003998 Softwebs Nepal Ananda Real Estate の list.asp における SQL インジェクションの脆弱性 Softwebs Nepal Ananda Real Estate の list.asp には、SQL インジェクションの脆弱性が存在します。 CVE-2010-4782 47362 CVE-2010-4782 16020 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003998.html 2011-04-07 2012-03-27 View