CVE-2023-33770: SQL Injection
Published May 6, 2025
·Updated
Real Estate Management System v1.0 was discovered to contain a SQL injection vulnerability via the message parameter at /contact.php.
Affected Software
1 affected component
Real Estate Management System Real Estate Management System
Event History
May 6, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-33770?
CVE-2023-33770 has a high severity rating due to the potential for SQL injection attacks.
2
How do I fix CVE-2023-33770?
To fix CVE-2023-33770, validate and sanitize user input to prevent SQL injection in the message parameter in /contact.php.
3
What software is affected by CVE-2023-33770?
CVE-2023-33770 affects Real Estate Management System version 1.0.
4
What is SQL injection in the context of CVE-2023-33770?
SQL injection in CVE-2023-33770 allows attackers to execute arbitrary SQL code through the vulnerable message parameter.
5
What impact could CVE-2023-33770 have on my application?
If exploited, CVE-2023-33770 can lead to unauthorized access to the database, data leakage, or data manipulation.