CVEvulnerability
CVE-2008-5772
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-12-30
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to type.asp and the (2) iPro parameter to detail.asp.
Affected configurations
• aspsiteware realtylistings 1.0
• aspsiteware realtylistings 2.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/50707 Exploit
- http://osvdb.org/50708 Exploit
- http://secunia.com/advisories/33167 Vendor Advisory
- http://securityreason.com/securityalert/4848 securityreason.com
- http://www.securityfocus.com/bid/32812 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47323 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7464 www.exploit-db.com
- http://osvdb.org/50707 Exploit
- http://osvdb.org/50708 Exploit
- http://secunia.com/advisories/33167 Vendor Advisory
- http://securityreason.com/securityalert/4848 securityreason.com
- http://www.securityfocus.com/bid/32812 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47323 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/7464 www.exploit-db.com