Lucene search
HistoryNov 17, 2006 - 12:07 a.m.
CVE-2006-5955
cve-2006-5955
sql injection
20/20 datashed
real estate listing system
remote attackers
arbitrary sql commands
itemid parameter
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
75.0%
SQL injection vulnerability in listings.asp in 20/20 DataShed (aka Real Estate Listing System) allows remote attackers to execute arbitrary SQL commands via the itemID parameter. NOTE: some of these details are obtained from third party information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| 20_20_applications:20_20_datashed | 20 20 applications 20 20 datashed | eq | * |
8.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.005 Low
EPSS
Percentile
75.0%
Related for CVE-2006-5955