← Database

CVE-2008-3861

HIGH CVSS: 7.5 Published: 2008-08-29 Modified: 2026-06-16

Description

Multiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the id parameter in pages.php and (2) the price_max parameter in search.php.

Affected Platforms

Phpmyrealty Phpmyrealty

Weakness Type

CWE-89

References