Description
SQL injection vulnerability in propview.php in Free Realty 2.9-0.7 and earlier allows remote attackers to execute arbitrary SQL commands via the sort parameter.
References
- ADV-2006-2432 vdb-entry
- http://pridels0.blogspot.com/2006/06/free-realty-vuln.html
- 20705 third-party-advisory
- 26667 vdb-entry
- 18531 vdb-entry
- freerealty-propview-sql-injection(27252) vdb-entry