Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting arbitrary SQL code through the GET parameter 'u_id' in /admin/users.php and the POST parameter 'agent[]' in /admin/mailer.php. Attackers can exploit time-based blind SQL injection techniques to extract sensitive database information or cause denial of service through sleep-based payloads.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2015-20121 Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting arbitra… https://www.cve.org/CVERecord?id=CVE-2015-20121
Post summary
The CVE refers to an SQL injection flaw in RealtyScript 4.0.2 that lets unauthenticated attackers alter database queries; no PoC, exploit, patch, or active exploitation details are provided.
CVE Alert: CVE-2015-20121 - Next Click Ventures - RealtyScripts - https://www.redpacketsecurity.com/cve-alert-cve-2015-20121-next-click-ventures-realtyscripts/ #OSINT #ThreatIntel #CyberSecurity #cve-2015-20121 #next-click-ventures #realtyscripts
Post summary
A CVE alert for CVE‑2015‑20121 involving Next Click Ventures RealtyScripts is posted, but the brief text lacks technical specifics, PoC, or exploit information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nextclickventures | realtyscript | 4.0.2 | - | - |