← Database

CVE-2008-2190

MEDIUM CVSS: 6.8 Published: 2008-05-14 Modified: 2026-06-16

Description

SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected.

Affected Platforms

Romedchim International Srl Online Rent Property Script

Weakness Type

CWE-89

References