CVE:CVE-2018-6364
CNNVD:CNNVD-201801-1065
Multilanguage Real Estate MLM Script是一套房地产在线销售网站脚本。
Multilanguage Real Estate MLM Script 3.0及之前版本中存在SQL注入漏洞。远程攻击者可通过向/product-list.php文件发送‘srch’参数利用该漏洞注入SQL命令。
solution:Upgrade multilanguage_real_estate_mlm_script_project multilanguage_real_estate_mlm_script to a higher version than 3.0,and avoid the version (,3.0]