| Package | Affected versions | Patched versions |
|---|---|---|
| real estate portal | = 4.0 |
Netartmedia PHP Real Estate Agency 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the features[] parameter. Attackers can send POST requests to index.php with crafted SQL payloads in the features[] parameter to extract sensitive database information or manipulate database queries.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free