CVE-2015-20121 - Vulnerability Analysis

Overview

Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities caused by unsanitized 'u_id' GET parameter in /admin/users.php and 'agent[]' POST parameter in /admin/mailer.php, letting unauthenticated attackers extract sensitive data or cause denial of service via time-based blind SQL injection.

Severity & Score

Impact

Unauthenticated attackers can extract sensitive database information or cause denial of service via SQL injection.

Mitigation

Update to the latest version of RealtyScript.

References

• http://www.zeroscience.mk/en/vulnerabilities/ZSL-2015-5270.php
• https://www.exploit-db.com/exploits/38497
• https://www.vulncheck.com/advisories/realtyscript-sql-injection-via-u-id-and-agent-parameters

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner