CVE-2019-25479: Inout RealEstate Lastest SQL Injection via agentlistdetails
Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the city parameter. Attackers can send POST requests to the agents/agentlistdetails endpoint with malicious SQL payloads in the city parameter to extract sensitive database information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25479?
The severity of CVE-2019-25479 is considered high due to its potential for unauthorized database manipulation.
How does CVE-2019-25479 work?
CVE-2019-25479 allows attackers to inject SQL code into database queries through the city parameter in POST requests.
Who is affected by CVE-2019-25479?
CVE-2019-25479 affects users of the Inout RealEstate application that are using vulnerable versions.
How do I fix CVE-2019-25479?
To fix CVE-2019-25479, it is recommended to implement proper input validation and prepared statements to sanitize user inputs.
What impact can CVE-2019-25479 have on my system?
CVE-2019-25479 can potentially lead to unauthorized access to database information, data leakage, and integrity issues.