Skip to content
OpenAdvisories

Product · Next Click Ventures

RealtyScripts

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2015-20121

    RealtyScript 4.0.2 SQL Injection via u_id and agent Parameters

    Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting arbitrary SQL code through the GET parameter 'u_id' in /admin/users.php and the POST parameter 'agen…

    Next Click Ventures RealtyScripts