Description
Netartmedia Real Estate Portal 5.0 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user_email parameter. Attackers can send POST requests to index.php with malicious payloads in the user_email field to bypass authentication, extract sensitive data, or modify database contents.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Netartmedia | Netartmedia Real Estate Portal | 5.0 | — |
References
- ExploitDB-46563 exploit
- VulnCheck Advisory: Netartmedia Real Estate Portal 5.0 SQL Injection via index.php third-party-advisory