CVE-2010-5006

EMO Realty Manager - SQL Injection via googlemap/index.php cat1 Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in googlemap/index.php in EMO Realty Manager allows remote attackers to execute arbitrary SQL commands via the cat1 parameter.

References (4)

Core 4
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/40625
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1404
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8505

Scores

EPSS 0.0119
EPSS Percentile 64.7%

Details

CWE
CWE-89
Status published
Products (1)
emophp/emo_realty_manager
Published Nov 02, 2011
Tracked Since Feb 18, 2026