CVEvulnerability
CVE-2010-4782
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-04-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 allow remote attackers to execute arbitrary SQL commands via the (1) city, (2) state, (3) country, (4) minprice, (5) maxprice, (6) bed, and (7) bath parameters, different vectors than CVE-2006-6807.
Affected configurations
• softwebsnepal ananda real estate 3.4
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://packetstormsecurity.org/files/view/96305/anandarealestate-sql.txt Exploit
- http://secunia.com/advisories/23506 Vendor Advisory
- http://securityreason.com/securityalert/8185 securityreason.com
- http://www.exploit-db.com/exploits/15661 Exploit
- http://www.securityfocus.com/bid/45146 Exploit
- http://packetstormsecurity.org/files/view/96305/anandarealestate-sql.txt Exploit
- http://secunia.com/advisories/23506 Vendor Advisory
- http://securityreason.com/securityalert/8185 securityreason.com
- http://www.exploit-db.com/exploits/15661 Exploit
- http://www.securityfocus.com/bid/45146 Exploit