CVE-2008-6798

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-05-07 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in login.php in Pre Projects Pre Real Estate Listings allow remote attackers to execute arbitrary SQL commands via (1) the us parameter (aka the Username field) or (2) the ps parameter (aka the Password field).

Affected products

Preprojects Pre Real Estate Listings: all versions

References

http://www.securityfocus.com/bid/32134
http://www.vupen.com/english/advisories/2008/3121
https://www.exploit-db.com/exploits/7094
http://www.securityfocus.com/bid/32134
http://www.vupen.com/english/advisories/2008/3121
https://www.exploit-db.com/exploits/7094

Get alerted when CVE-2008-6798 or the next vulnerability affects your stack