CVE-2017-17603

Name of the Vulnerable Software and Affected Versions Advanced Real Estate Script version 4.0.7

Description The issue concerns a SQL Injection problem. It affects the search-results.php file through the Projectmain, proj type, searchtext, sell price, or maxprice parameters.

Recommendations For Advanced Real Estate Script version 4.0.7, consider restricting access to the search-results.php file until a patch is available. As a temporary workaround, avoid using the Projectmain, proj type, searchtext, sell price, or maxprice parameters in the search-results.php file to minimize the risk of exploitation.