CVE-2006-6067: Undefined Security Weakness

Multiple SQL injection vulnerabilities in 20/20 DataShed aka Real Estate Listing System allow remote attackers to execute arbitrary SQL commands via the 1 itemID parameter to a f-email.asp, or the 2 peopleID and 2 sortorder parameters to b listings.asp, different vectors than CVE-2006-5955...