CVE-2008-5772

Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to type.asp and the (2) iPro parameter to detail.asp.

Link	Resource
http://secunia.com/advisories/33167	Vendor Advisory
http://osvdb.org/50707	Exploit
http://osvdb.org/50708	Exploit
http://securityreason.com/securityalert/4848
http://www.securityfocus.com/bid/32812
https://exchange.xforce.ibmcloud.com/vulnerabilities/47323
https://www.exploit-db.com/exploits/7464

Configuration 1

cpe:2.3:a:aspsiteware:realtylistings:1.0:*:*:*:*:*:*:* cpe:2.3:a:aspsiteware:realtylistings:2.0:*:*:*:*:*:*:*

---

Published : 2008-12-30 08:30

Updated : 2017-09-29 01:32

---

NVD link : CVE-2008-5772

Mitre link : CVE-2008-5772

No products.

CWE-89