VulnerabilityModified
CVE-2008-2190
SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter.
MEDIUM 6.8EPSS 2.17%
Does this matter?
Lower severity and a low EPSS score (2.17%). Track it; it rarely justifies an emergency change on its own.
Description
SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.17% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- romedchim international srl/online rent property script
- Source
- cve@mitre.org
References
- http://advisories.echo.or.id/adv/adv91-K-159-2008.txt
- http://secunia.com/advisories/30090Vendor Advisory
- http://secunia.com/advisories/35147
- http://securityreason.com/securityalert/3875
- http://www.securityfocus.com/archive/1/491607/100/0/threaded
- http://www.securityfocus.com/archive/1/491816/100/0/threaded
- http://www.securityfocus.com/bid/29052Exploit
- http://www.securityfocus.com/bid/35005
- http://www.vupen.com/english/advisories/2009/1366
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42191
- https://www.exploit-db.com/exploits/5542
- https://www.exploit-db.com/exploits/8711
- http://advisories.echo.or.id/adv/adv91-K-159-2008.txt
- http://secunia.com/advisories/30090Vendor Advisory
- http://secunia.com/advisories/35147
- http://securityreason.com/securityalert/3875
- http://www.securityfocus.com/archive/1/491607/100/0/threaded
- http://www.securityfocus.com/archive/1/491816/100/0/threaded
- http://www.securityfocus.com/bid/29052Exploit
- http://www.securityfocus.com/bid/35005
- http://www.vupen.com/english/advisories/2009/1366
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42191
- https://www.exploit-db.com/exploits/5542
- https://www.exploit-db.com/exploits/8711
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.