CVE-2006-5886

CVE-2006-5886 describes a SQL injection vulnerability in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier. The flaw lies in the PropID parameter processed by propertysdetails.asp, enabling remote attackers to execute arbitrary SQL commands. The CVSS metrics indicate a network-vector, low co...