responsive realestate script vulnerabilities and fixes

Recent CVEs affecting responsive realestate script, with upgrade or downgrade steps. 3 tracked.

Also searched as: responsiverealestatescript.

responsive realestate script has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-27. Highest priority: CVE-2017-17628 (score 65/100).

• CVE-2017-17909 MEDIUM 4.8 DOWNGRADE PHP Scripts Mall Responsive Realestate Script has XSS via the admin/general.php gplus parameter.
• CVE-2017-17908 HIGH 8.8 DOWNGRADE PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
• CVE-2017-17628 CRITICAL 9.8 DOWNGRADE Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter.

FAQ

How do I fix responsive realestate script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is responsive realestate script being exploited right now?

None of the tracked responsive realestate script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which responsive realestate script CVE should I patch first?

CVE-2017-17628 currently ranks highest (65/100): Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter..

RSS feed for responsive realestate script · ← Back to latest CVEs