Rwcinc

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Rwcinc records in CISA KEV

No Rwcinc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Free Realty 3 records LOW

Records

3 records

TI-2012-03659 CVE-2012-4279 · GHSA-3v55-xxgq-5673

Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to…

LOW 35

Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to agentdisplay.php or (2) edit parameter to admin/admin.php.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01119 Published 2012-08-13 No fix listed CWE-89

TI-2012-03660 CVE-2012-4280 · GHSA-x33f-ghcj-vx83

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in…

LOW 32

Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that (1) add an agent via an a…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01086 Published 2012-08-13 No fix listed CWE-352

TI-2012-03658 CVE-2012-4278 · GHSA-92fh-p9cq-cx2m

Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) notes parameter to (a) admin/agenteditor.php; (2) title, (3) previewdes…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01648 Published 2012-08-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0