CVE-2010-1708
Estado: ModificadaAlta (7.5)—
Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter).
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
- Puntuación base: 7.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.97%
- Percentil entre todas las CVEs puntuadas: 61
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-89
Referencias
- http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt
- http://www.exploit-db.com/exploits/12411
- http://www.securityfocus.com/bid/39712
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58193
- http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt
- http://www.exploit-db.com/exploits/12411
- http://www.securityfocus.com/bid/39712
- https://exchange.xforce.ibmcloud.com/vulnerabilities/58193
JSON original (NVD)
Mostrar
{
"id": "CVE-2010-1708",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 7.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "HIGH",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-05-04T16:00:35.840",
"references": [
{
"url": "http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.exploit-db.com/exploits/12411",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/39712",
"tags": [
"Exploit"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58193",
"source": "cve@mitre.org"
},
{
"url": "http://packetstormsecurity.org/1004-exploits/freerealty-sql.txt",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.exploit-db.com/exploits/12411",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/39712",
"tags": [
"Exploit"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/58193",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-89"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Multiple SQL injection vulnerabilities in agentadmin.php in Free Realty allow remote attackers to execute arbitrary SQL commands via the (1) login field (aka agentname parameter) or (2) password field (aka agentpassword parameter)."
},
{
"lang": "es",
"value": "Múltiples vulnerabilidades de inyección SQL en agentadmin.php en Free Realty permiten a atacantes remotos ejecutar sentencias SQL de su elección a través de (1) campo login (también conocido como parámetro agentname) o (2) campo password (también conocido como parámetro agentpassword)."
}
],
"lastModified": "2026-06-16T23:19:10.043",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F062FAA5-BBD5-48B0-A488-9F09BB5268F0"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1AF21CC5-D438-412E-8C20-0E65FA2EFD74"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CC09D3BA-AEB6-4FD5-8CB8-5BB5B9994D1E"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9E5C72E-C345-4725-A76F-65D7000EBFC5"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA295B8A-8426-464F-B51D-ED93D36C466D"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFCA64A6-FF3B-47E9-BE54-9A40F6638006"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6A5BD9D1-BB39-49FC-8238-12DE2BBDB848"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39595D42-9A8F-495C-A6E9-E95471B1F335"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9277B3BC-731E-4E59-BD84-16A9E3A75771"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.7:pre7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A94D0484-D432-494C-B78F-C9547B636E84"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40E509FE-BCC1-4494-90A8-4CC1024A10F4"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99061E09-9431-474F-B42D-8A5C2848C072"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "179124B1-E1D4-492D-9666-A71E1AA082CA"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0BD3BE9-B0D5-45B4-8C0D-7F7B7EFC0A62"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7CA24CCD-046A-4D05-9CEF-FB0C582C2C41"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F35B830-C978-4241-A487-93FD1D4B4661"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6:pre1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E82EEA7-3CCF-475B-B076-07BD26BEAB90"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6:pre2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E95C4907-930D-4709-9207-F65433D108D8"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6:pre3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C659B072-1F16-4732-B863-64104ACF2A6B"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.8.6-1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56AD076B-0C1E-460B-A9A4-E208B89B50BC"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "539C9500-5A29-45BD-B09E-0F547DB59C35"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "189E852D-F8CB-4E6D-B809-760C6AC6ED11"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre2.1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0FB57FB7-2792-4294-A072-737B4E749C0F"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre2.2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "05FFF42A-7CB6-4184-98CB-7775D5AD60FD"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9:pre3.0:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D16FF13F-8285-4EEF-9ECC-9737F823926C"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B7F2724-598C-4C97-8FA2-5E8B2015A66C"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF9D0CD5-2A4F-40A0-9B32-F25E0FEBB946"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBA45FC3-8DB4-4B53-B9FD-6EF44C16E4D6"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "564761B5-1511-4054-ADC4-871B7FC71B14"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71E0C855-9D28-474B-84E5-45F1E9757511"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E6B83FBE-0EDF-43F0-89AA-79CD158EAE30"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D95DD2EB-0FF9-48AB-B0CA-ACD60D1B07DA"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9F790703-B202-411C-A47A-77FD27545E22"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19C6DD8B-B224-49F4-8D87-81C7949B33FA"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BD3B13E-6DC5-4E70-A3A8-4334969E2F85"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:2.9-0.7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CDE1B8E-CB30-4605-9893-8DFA1ED16F8A"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DF83E3C3-C561-4D2E-9618-0506A0A8FD4C"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1C451C36-9F45-47FC-99AF-8D05B6D4D1B4"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2BB2FE61-B47A-4C0D-B51F-D172845F36C7"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5260593A-75FF-4184-A9C9-C51FE89E3F84"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86B06823-9B90-4605-B698-5B1E1F14D270"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc6:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E3B67D37-C189-49E5-A0E1-24C7241626B4"
},
{
"criteria": "cpe:2.3:a:freerealty.rwcinc:free_realty:3.0-0:rc7:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AD09A44-E492-457F-A60C-A3FC7A5B7C0F"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "cve@mitre.org"
}