SQL Injection Vulnerability in Simple Real Estate Portal System by Oretnom23
CVE-2022-28028

9.8CRITICAL

Key Information:

Vendor: Simple Real Estate Portal System Project
Status: Simple Real Estate Portal System
Vendor: CVE Published:; 21 April 2022

🔔 Create Simple Real Estate Portal System Project Vulnerability Alert

What is CVE-2022-28028?

A SQL injection vulnerability has been identified in version 1.0 of the Simple Real Estate Portal System. This vulnerability can be exploited through the endpoint /reps/classes/Master.php?f=delete_amenity, allowing an attacker to execute arbitrary SQL queries and potentially gain unauthorized access to the database. It is crucial for users of this system to apply necessary security patches and ensure their environments are secure against such threats.

References

https://github.com/k0xx11/bug_report/blob/main/vendors/or...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 21, 2022
Vulnerability Reserved
Mar 28, 2022

CVE-2022-28028 Data

JSON