CVE-2008-6796: Preprojects Pre Real Estate Listings

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in manager/login.php in Pre Projects Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the username1 parameter (aka the Admin field or Username field).

Affected products

• Preprojects Pre Real Estate Listings: any version

Published 2009-05-07. Last modified 2026-06-16.