CVE-2010-1708
Free Realty - SQL Injection via Agent Login or Password Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-1708. PoCs published by Sid3^effects.
AI-analyzed exploit summary This is a writeup describing an authentication bypass vulnerability in FreeRealty. The exploit involves using a SQL injection payload (' or 1=1 or ''=') in both the login and password fields to bypass authentication.
Description
Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter).
Exploits (1)
This is a writeup describing an authentication bypass vulnerability in FreeRealty. The exploit involves using a SQL injection payload (' or 1=1 or ''=') in both the login and password fields to bypass authentication.