CVE-2008-5774 Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to (a) type.asp and (b) type2.asp and...
HighCVSS 7.5
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to (a) type.asp and (b) type2.asp and the (2) iPro parameter to (c) detail.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aspsiteware homebuilder | = 1.0 | No fix listed |
| aspsiteware homebuilder | = 2.0 | No fix listed |
References
- 33172 third-party-advisory vendor-advisory
- 32812 vdb-entry
- homebuilder-typedetail-sql-injection(47319) vdb-entry
- 7462 exploit