CVE-2012-5290: Multiple SQL injection vulnerabilities in EasyWebRealEstate allow remote attackers to execute arbitrary SQL...

Security readout for executives and security teams

This CVE describes SQL injection in EasyWebRealEstate. If a vulnerable site exposes affected listing or information pages, a remote attacker could manipulate database queries and potentially read or change site data. The record does not name affected versions or a vendor fix, so exposure depends on finding the software and confirming the vulnerable routes. Likely exposure is limited to public or internal sites still running EasyWebRealEstate with listings.php or index.php accepting the named parameters. The source bundle does not identify affected versions, package names, or CPEs, so inventory confirmation is required. Prioritize this if EasyWebRealEstate is internet-facing or stores customer, lead, listing, or administrative data. The issue is old, public, and lacks clear vendor fix information in the provided sources, making replacement or containment a practical priority. Mitigation focus: Inventory sites for EasyWebRealEstate and the affected PHP routes.; Check vendor or maintainer guidance for any available fixed release.; Remove or replace unsupported EasyWebRealEstate deployments where feasible..

Prepared

Jun 27, 2026, 16:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.