CVE-2008-6798

Pre Real Estate Listings - Arbitrary File Upload

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2008-6798 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.

Description

Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field).

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBPre Real Estate Listings - Arbitrary File UploadExploitDB exploitby BackDoorNot analyzed1 file

linked to 2 vulnerabilities

ExploitDB
PoC details

References

4