CVE-2015-7714

ALTO 7.2CVE-2015-7714 · Published 18/10/2017 · updated 17/06/2026

En resumen

CVE-2015-7714 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a realtyna property listing (realtyna).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.2%, mayor que el 82.5% de las vulnerabilidades.
Solución: actualizar a 8.9.5 o posterior.

Package	Affected versions	Patched versions
realtyna property listing realtyna	`< 8.9.5`	`8.9.5`

Description

Multiple SQL injection vulnerabilities in the Realtyna RPL (com_rpl) component before 8.9.5 for Joomla! allow remote administrators to execute arbitrary SQL commands via the (1) id, (2) copy_field in a data_copy action, (3) pshow in an update_field action, (4) css, (5) tip, (6) cat_id, (7) text_search, (8) plisting, or (9) pwizard parameter to administrator/index.php.

References

packetstormsecurity.com/files/134066/Realtyna-RPL-8.9.2-SQL-Injection.html · Third Party Advisory
rpl.realtyna.com/change-logs/rpl7-changelog · Vendor Advisory
zeroscience.mk/en/vulnerabilities/ZSL-2015-5272.php · Third Party Advisory
exploit-db.com/exploits/38527 · Third Party Advisory

Más vulnerabilidades de realtyna property listing

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free