CVE-2008-5774

EUVD-2008-5744
Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to (a) type.asp and (b) type2.asp and the (2) iPro parameter to (c) detail.asp.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
aspsitewarehomebuilder
1.0
aspsitewarehomebuilder
2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/33172
http://www.securityfocus.com/bid/32812
https://exchange.xforce.ibmcloud.com/vulnerabilities/47319
https://www.exploit-db.com/exploits/7462
http://secunia.com/advisories/33172
http://www.securityfocus.com/bid/32812
https://exchange.xforce.ibmcloud.com/vulnerabilities/47319
https://www.exploit-db.com/exploits/7462