Skip to content
OpenAdvisories
Medium · 6.3 CVE-2017-20130 EUVD-2017-11137GHSA-4xjg-4727-ccc3

Itech Real Estate Script search_property.php sql injection

Published Jul 16, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability was found in Itech Real Estate Script 3.12. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /real-estate-script/search_property.php. The manipulation of the argument property_for leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

VendorProductAffectedFixed
Itech Real Estate Script 3.12 —

References