CVE-2008-5772 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 1.2% (pctl 67)
Patch early
A public exploit exists.
Description
Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to type.asp and the (2) iPro parameter to detail.asp.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 1.19% — more likely to be exploited than 67% of all CVEs |
| Weakness | CWE-89 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-12-30 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| aspsiteware | realtylistings |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | ASPSiteWare RealtyListing 1.0/2.0 - SQL Injection | 2008-12-14 |
References
- http://osvdb.org/50707
- http://osvdb.org/50708
- http://secunia.com/advisories/33167
- http://securityreason.com/securityalert/4848
- http://www.securityfocus.com/bid/32812
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47323
- https://www.exploit-db.com/exploits/7464
- http://osvdb.org/50707
- http://osvdb.org/50708
- http://secunia.com/advisories/33167
- http://securityreason.com/securityalert/4848
- http://www.securityfocus.com/bid/32812
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47323
- https://www.exploit-db.com/exploits/7464
→ the Explorer · watch your stack · NVD