CVE-2008-4328: Easyrealtorpro

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in site_search.php in EasyRealtorPRO 2008 allows remote attackers to execute arbitrary SQL commands via the (1) item, (2) search_ordermethod, and (3) search_order parameters.

Affected products

• Easyrealtorpro Easyrealtorpro: version 2008 only

Published 2008-09-30. Last modified 2026-06-16.