CVE-2006-0624 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.3% (pctl 70)
Patch early
A public exploit exists.
Description
SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.32% — more likely to be exploited than 70% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-02-09 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| webeveyn | whomp real estate manager xp 2005 |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Webeveyn Whomp! Real Estate Manager 2005 - Login SQL Injection | 2006-02-08 |
References
- http://secunia.com/advisories/18780
- http://securityreason.com/securityalert/418
- http://www.osvdb.org/22969
- http://www.securityfocus.com/archive/1/424389/100/0/threaded
- http://www.securityfocus.com/bid/16544
- http://www.vupen.com/english/advisories/2006/0489
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24592
- http://secunia.com/advisories/18780
- http://securityreason.com/securityalert/418
- http://www.osvdb.org/22969
- http://www.securityfocus.com/archive/1/424389/100/0/threaded
- http://www.securityfocus.com/bid/16544
- http://www.vupen.com/english/advisories/2006/0489
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24592
→ the Explorer · watch your stack · NVD