CVE-2006-6067 | BDVDB-2026-20464 Detail

Description#

Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) f-email.asp, or the (2) peopleID and (2) sort_order parameters to (b) listings.asp, different vectors than CVE-2006-5955.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/30402
http://www.securityfocus.com/bid/21156
http://www.securityfocus.com/archive/1/451962/100/0/threaded
http://s-a-p.ca/index.php?page=OurAdvisories&id=40

Exploit#

No public exploit known

History#

Version 12006-11-22Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.