https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T20:15:22.666711+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2015-20121 CVE-2015-20121 — RealtyScript 4.0.2 SQL Injection via u_id and agent Parameters 2026-10-15T20:15:25.938483+00:00

Affected: Next Click Ventures RealtyScripts

Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting arbitrary SQL code through the GET parameter 'u_id' in /admin/users.php and the POST parameter 'agent[]' in /admin/mailer.php. Attackers can exploit time-based blind SQL injection techniques to extract sensitive database information or cause denial of service through sleep-based payloads.