Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the city parameter. Attackers can send POST requests to the agents/agentlistdetails endpoint with malicious SQL payloads in the city parameter to extract sensitive database information.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2019-25479 Inout RealEstate contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the city p… https://www.cve.org/CVERecord?id=CVE-2019-25479
Post summary
The text announces CVE-2019-25479 as an SQL injection flaw in Inout RealEstate, allowing unauthenticated attackers to manipulate database queries via the city parameter.
CVE Alert: CVE-2019-25479 - Inoutscripts - Inout RealEstate - https://www.redpacketsecurity.com/cve-alert-cve-2019-25479-inoutscripts-inout-realestate/ #OSINT #ThreatIntel #CyberSecurity #cve-2019-25479 #inoutscripts #inout-realestate
Post summary
A brief alert with a hyperlink to a symptom page, but no technical, exploit, or mitigation details are included in the provided text.