CVE-2008-5772

Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 iType parameter to type.asp and the 2 iPro parameter to detail.asp...

CVE-2008-5772

The CVE-2008-5772 entry describes multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0. The affected components are the application’s type.asp (parameter iType) and detail.asp (parameter iPro). The underlying issue is improper input handling that allows remote attacker...