7.5
CVE-2006-5886
- EPSS 1.26%
- Veröffentlicht 14.11.2006 22:07:00
- Zuletzt bearbeitet 16.06.2026 22:32:04
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dynamic Dataworx ≫ Nurealestate Version1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.26% | 0.656 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://secunia.com/advisories/22828
http://securityreason.com/securityalert/1850
http://www.securityfocus.com/archive/1/451331/100/0/threaded
http://www.securityfocus.com/bid/21017
http://www.vupen.com/english/advisories/2006/4469
https://exchange.xforce.ibmcloud.com/vulnerabilities/30194
https://www.exploit-db.com/exploits/2755