Vulnerability Details CVE-2008-5772
Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to type.asp and the (2) iPro parameter to detail.asp.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 64.4%
CVSS Severity
CVSS v2 Score 7.5
References
- http://osvdb.org/50707
- http://osvdb.org/50708
- http://secunia.com/advisories/33167
- http://securityreason.com/securityalert/4848
- http://www.securityfocus.com/bid/32812
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47323
- https://www.exploit-db.com/exploits/7464
- http://osvdb.org/50707
- http://osvdb.org/50708
- http://secunia.com/advisories/33167
- http://securityreason.com/securityalert/4848
- http://www.securityfocus.com/bid/32812
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47323
- https://www.exploit-db.com/exploits/7464
Products affected by CVE-2008-5772
-
cpe:2.3:a:aspsiteware:realtylistings:1.0
-
cpe:2.3:a:aspsiteware:realtylistings:2.0