SQL Injection Vulnerability in Simple Real Estate Portal System by Oretnom23
CVE-2022-28410

9.8CRITICAL

Key Information:

Vendor: Simple Real Estate Portal System Project
Status: Simple Real Estate Portal System
Vendor: CVE Published:; 21 April 2022

🔔 Create Simple Real Estate Portal System Project Vulnerability Alert

What is CVE-2022-28410?

The Simple Real Estate Portal System v1.0 has been identified with a SQL injection flaw that can be exploited through the /reps/classes/Users.php?f=delete_agent endpoint. Attackers can manipulate input parameters to execute arbitrary SQL queries, potentially compromising sensitive data within the application's database. This vulnerability emphasizes the need for robust input validation and secure coding practices to protect against SQL injection attacks.

References

https://github.com/k0xx11/bug_report/blob/main/vendors/or...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 21, 2022
Vulnerability Reserved
Apr 4, 2022

CVE-2022-28410 Data

JSON