VYPR

The Real Estate Script

by Vastal

CVEs (1)

  • CVE-2017-15991CriOct 31, 2017
    risk 0.67cvss 9.8epss 0.03

    Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or searchResidential.php via the property_type, city, or bedroom parameter, a different vulnerability than CVE-2008-3951,…