Agent Zone

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-15991 Oct 31, 07:29 CRITICAL POC Act Now

Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or searchResidential.php via the property_type,. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Agent Zone Vastal

NVD Exploit-DB

CVSS 3.0

9.8

EPSS

1.4%

CVE-2012-0982 Feb 02, 17:55 HIGH POC This Week

SQL injection vulnerability in search.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the price_from parameter. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Agent Zone Vastal

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

0.1%

CVE-2017-15991

EPSS 1% CVSS 9.8

CRITICAL POC Act Now

PHP SQLi Agent Zone +1

NVD Exploit-DB

CVE-2012-0982

EPSS 0% CVSS 7.5

HIGH POC This Week

PHP SQLi Agent Zone +1

NVD Exploit-DB