CVE-2017-15991 — CVE-2017-15991

CVE-2017-15991

CRITICAL · CVSS 9.8

EPSS exploitation probability: 0%

Published 2017-10-31T07:29:00.800 · Last modified 2026-06-17T01:08:36.587

Summary

Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or searchResidential.php via the property_type, city, or bedroom parameter, a different vulnerability than CVE-2008-3951, CVE-2009-3497, and CVE-2012-0982.

Affected products

vastal — agent_zone

Does this affect you?

Add your gear to cvedb and we'll alert you only when vastal ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.