CVE-2017-17603

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Advanced Real Estate Script version 4.0.7 has a SQL Injection vulnerability via the projectmain, proj_type, searchtext, sell_price, or maxprice parameters in the search-results.php file.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or data manipulation.

Recommendation

It is recommended to update the script to the latest version and implement input validation and sanitization to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

Advanced Real Estate Script 4.0.7 has SQL Injection via the search-results.php Projectmain, proj_type, searchtext, sell_price, or maxprice parameter.