Lucene search
HistoryNov 14, 2006 - 10:07 p.m.
CVE-2006-5886
cve-2006-5886
sql injection
propertysdetails.asp
dynamic dataworx nurealestate
nurems 1.0
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.3%
SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter.
Affected configurations
Node
dynamic_dataworxnurealestateMatch1.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| dynamic_dataworx:nurealestate | dynamic dataworx nurealestate | eq | 1.0 |
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8.8 High
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
74.3%
Related for CVE-2006-5886