• info
• discussion
• exploit
• solution
• references

Klf-RealtyMultiple SQL Injection Vulnerabilities

An attacker can exploit these issues via a web client.

The following URIs demonstrate these issues:

http://www.example.com/search_listing.asp?category='[sql]
http://www.example.com/detail.asp?property_id='[sql]
http://www.example.com/search_listing.asp?agent='[sql]