Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers to extract database information by injecting SQL code into application parameters. Attackers can craft requests with time-delay payloads to infer database contents character by character based on response timing differences.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-16 | 1 | Disclosure1 |
| 2026-03-17 | 1 | General1 |
CVE Alert: CVE-2015-20120 - Next Click Ventures - RealtyScript - https://www.redpacketsecurity.com/cve-alert-cve-2015-20120-next-click-ventures-realtyscript/ #OSINT #ThreatIntel #CyberSecurity #cve-2015-20120 #next-click-ventures #realtyscript
Post summary
The tweet links to a blog post about CVE-2015-20120 but provides no technical or exploit details, making it a general CVE announcement.
CVE-2015-20120 Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unauthenticated attackers to extract database infor… https://www.cve.org/CVERecord?id=CVE-2015-20120
Post summary
CVE-2015-20120 identifies a time‑based blind SQL injection in RealtyScript 4.0.2 that enables unauthenticated database extraction.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nextclickventures | realtyscript | 4.0.2 | - | - |