CVE-2013-5931
Real Estate PHP Script - SQL Injection via listingid Parameter
Title source: llmDescription
SQL injection vulnerability in property_listings_detail.php in Real Estate PHP Script allows remote attackers to execute arbitrary SQL commands via the listingid parameter.
References (1)
Core 1
Core References
Exploit x_refsource_misc
http://packetstormsecurity.com/files/123138/realestatephpscript-xss.txt
Scores
EPSS
0.0122
EPSS Percentile
65.6%
Details
CWE
CWE-89
Status
published
Products (1)
real-estate-php-script/real_estate_php_script
Published
Sep 23, 2013
Tracked Since
Feb 18, 2026