Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Responsive Real Estate Script admin actions can be forged

CVE-2017-17908 · published 8 years ago
Summary

The responsive_realestate_script for real‑estate listings allows a cross‑site request forgery attack on its admin functions. An attacker could trick a logged‑in administrator into performing unwanted changes without their knowledge. Apply the vendor's security patch or restrict admin access to trusted networks promptly.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
responsive_realestate_script_project responsive_realestate_script 3.3.3
cpe:2.3:a:responsive_realestate_script_project:responsive_realestate_script:3.3.3:*:*:*:*:*:*:*
Original advisory text
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
PHP Scripts Mall Responsive Realestate Script has CSRF via admin/general.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-352Cross-Site Request Forgery (CSRF)
Timeline
Published27 Dec 2017
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-17908 · NVD
Track software like this
Free during beta