CVE-2008-5772

Description

Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to type.asp and the (2) iPro parameter to detail.asp.

References

https://www.exploit-db.com/exploits/7464

https://exchange.xforce.ibmcloud.com/vulnerabilities/47323

http://www.securityfocus.com/bid/32812

http://securityreason.com/securityalert/4848

http://secunia.com/advisories/33167

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS