CVE-2008-2190

MEDIUM 6.8CVE-2008-2190 · Published 14/05/2008 · updated 16/06/2026

In short

CVE-2008-2190 is a MEDIUM (CVSS 6.8) vulnerability affecting online rent property script (romedchim international srl).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
online rent property script romedchim_international_srl	`= 4.2= 4.3= 4.4≤ 4.5`	No fix yet

Description

SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected.

References

advisories.echo.or.id/adv/adv91-K-159-2008.txt
secunia.com/advisories/30090 · Vendor Advisory
secunia.com/advisories/35147
securityreason.com/securityalert/3875
securityfocus.com/archive/1/491607/100/0/threaded
securityfocus.com/archive/1/491816/100/0/threaded
securityfocus.com/bid/29052 · Exploit
securityfocus.com/bid/35005
vupen.com/english/advisories/2009/1366
exchange.xforce.ibmcloud.com/vulnerabilities/42191
exploit-db.com/exploits/5542
exploit-db.com/exploits/8711

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free