CVE-2006-6807

CVE-2006-6807 is a SQL injection vulnerability in Softwebs Nepal’s Ananda Real Estate 3.4 and earlier. The flaw affects list.asp and allows remote attackers to execute arbitrary SQL commands via the agent parameter. The NVD entry lists a base score of 7.5 (HIGH) with network access, low attack co...