CVE-2008-2190 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 2.2% (pctl 82)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in index.php in Online Rent (aka Online Rental Property Script) 4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the pid parameter. NOTE: it was later reported that 5.0 and earlier are also affected.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 2.17% — more likely to be exploited than 82% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-05-14 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| romedchim international srl | online rent property script |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Online Rental Property Script 4.5 - 'pid' SQL Injection | 2008-05-05 |
References
- http://advisories.echo.or.id/adv/adv91-K-159-2008.txt
- http://secunia.com/advisories/30090
- http://secunia.com/advisories/35147
- http://securityreason.com/securityalert/3875
- http://www.securityfocus.com/archive/1/491607/100/0/threaded
- http://www.securityfocus.com/archive/1/491816/100/0/threaded
- http://www.securityfocus.com/bid/29052
- http://www.securityfocus.com/bid/35005
- http://www.vupen.com/english/advisories/2009/1366
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42191
- https://www.exploit-db.com/exploits/5542
- https://www.exploit-db.com/exploits/8711
- http://advisories.echo.or.id/adv/adv91-K-159-2008.txt
- http://secunia.com/advisories/30090
- http://secunia.com/advisories/35147
- http://securityreason.com/securityalert/3875
- http://www.securityfocus.com/archive/1/491607/100/0/threaded
- http://www.securityfocus.com/archive/1/491816/100/0/threaded
- http://www.securityfocus.com/bid/29052
- http://www.securityfocus.com/bid/35005
→ the Explorer · watch your stack · NVD