{"resultsPerPage":10,"startIndex":0,"totalResults":206,"format":"NVD_CVE","version":"2.0","timestamp":"2026-07-21T02:10:59.809","vulnerabilities":[{"cve":{"id":"CVE-2004-2153","sourceIdentifier":"cve@mitre.org","published":"2004-12-31T05:00:00.000","lastModified":"2026-06-16T22:09:06.657","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple unknown vulnerabilities in Real Estate Management Software 1.0 have unknown impact and attack vectors."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:real_estate_management_software:real_estate_management_software:1.0:*:*:*:*:*:*:*","matchCriteriaId":"CE8FD3FF-D272-4314-9697-D5A00049289E"}]}]}],"references":[{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12721","source":"cve@mitre.org","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10480","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/11304","source":"cve@mitre.org","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17598","source":"cve@mitre.org"},{"url":"http://archives.neohapsis.com/archives/apps/freshmeat/2004-09/0030.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://secunia.com/advisories/12721","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"]},{"url":"http://www.osvdb.org/10480","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/11304","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/17598","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-4018","sourceIdentifier":"cve@mitre.org","published":"2005-12-05T11:03:00.000","lastModified":"2026-06-16T22:18:04.167","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in ls.php in Landshop Real Estate Commerce System 0.6.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) start, (2) search_order, (3) search_type, (4) search_area, and (5) keyword parameters."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:landshop:real_estate_commerce_system:*:*:*:*:*:*:*:*","versionEndIncluding":"0.6.3","matchCriteriaId":"77D63D5C-3B24-4EFC-A4B8-2BA4BC03948E"}]}]}],"references":[{"url":"http://pridels0.blogspot.com/2005/12/landshop-real-estate-commerce-system.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17843","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/21433","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15709","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2005/2724","source":"cve@mitre.org"},{"url":"http://pridels0.blogspot.com/2005/12/landshop-real-estate-commerce-system.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17843","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/21433","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15709","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/2724","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2005-4019","sourceIdentifier":"cve@mitre.org","published":"2005-12-05T11:03:00.000","lastModified":"2026-06-16T22:18:04.270","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.php in Relative Real Estate Systems 1.02 and earlier allows remote attackers to execute arbitrary SQL commands via the mls parameter."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:a:relative_real_estate_systems:relative_real_estate_systems:*:*:*:*:*:*:*:*","versionEndIncluding":"1.02","matchCriteriaId":"92D65296-83C0-4F34-8592-49D20F394443"}]}]}],"references":[{"url":"http://pridels0.blogspot.com/2005/12/relative-real-estate-systems-sql-inj.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/17846","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/21432","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/15714","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2005/2723","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23435","source":"cve@mitre.org"},{"url":"http://pridels0.blogspot.com/2005/12/relative-real-estate-systems-sql-inj.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/17846","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/21432","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/15714","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2005/2723","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/23435","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-0624","sourceIdentifier":"cve@mitre.org","published":"2006-02-09T02:02:00.000","lastModified":"2026-06-16T22:20:57.620","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in check.asp in Whomp Real Estate Manager XP 2005 allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:webeveyn:whomp_real_estate_manager_xp_2005:*:*:*:*:*:*:*:*","matchCriteriaId":"54ADFE5F-A14C-419E-AE64-6A2DABAB8D03"}]}]}],"references":[{"url":"http://secunia.com/advisories/18780","source":"cve@mitre.org"},{"url":"http://securityreason.com/securityalert/418","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/22969","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/424389/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/16544","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2006/0489","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24592","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/18780","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://securityreason.com/securityalert/418","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/22969","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/424389/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/16544","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://www.vupen.com/english/advisories/2006/0489","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/24592","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-3153","sourceIdentifier":"cve@mitre.org","published":"2006-06-22T22:06:00.000","lastModified":"2026-06-16T22:26:30.417","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Cross-site scripting (XSS) vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat parameter."},{"lang":"es","value":"Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en index.pl en Ultimate Estate v1.0 y anteriores, permite a atacantes remotos inyectar secuencias de comandos web o HTML a través del parámetro cat.\r\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:N/I:P/A:N","baseScore":4.3,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thinkfactory:ultimate_estate:*:*:*:*:*:*:*:*","versionEndIncluding":"1.0","matchCriteriaId":"2D20C7C5-39D0-46DC-A5C4-10B3DBD67CA8"}]}]}],"references":[{"url":"http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/26741","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/18573","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/2475","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27274","source":"cve@mitre.org"},{"url":"http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.osvdb.org/26741","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/18573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/2475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27274","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-3154","sourceIdentifier":"cve@mitre.org","published":"2006-06-22T22:06:00.000","lastModified":"2026-06-16T22:26:30.520","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in index.pl in Ultimate Estate 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en index.pl en Ultimate Estate v1.0 y anteriores, permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id .\r\n"}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:thinkfactory:ultimate_estate:1.0:*:*:*:*:*:*:*","matchCriteriaId":"AA4C65B5-28BA-49C9-B914-3D9DFAF15124"}]}]}],"references":[{"url":"http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/20761","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016353","source":"cve@mitre.org"},{"url":"http://www.osvdb.org/26740","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/18573","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/2475","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27273","source":"cve@mitre.org"},{"url":"http://pridels0.blogspot.com/2006/06/ultimate-estate-vuln.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://secunia.com/advisories/20761","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securitytracker.com/id?1016353","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.osvdb.org/26740","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/18573","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/2475","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/27273","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-4322","sourceIdentifier":"cve@mitre.org","published":"2006-08-24T01:04:00.000","lastModified":"2026-06-16T22:28:51.210","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"PHP remote file inclusion vulnerability in estateagent.php in the EstateAgent component (com_estateagent) for Mambo, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter."},{"lang":"es","value":"Vulnerabilidad de inclusión remota de archivo en PHP en estateagent.php del componente EstateAgent (com_estateagent) para Mambo, cuando register_globals está activado, permite a atacantes remotos ejecutar código PHP de su elección mediante una URL en el parámetro mosConfig_absolute_path."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bits-dont-bite:estateagent:*:*:*:*:*:*:*:*","matchCriteriaId":"A4EA585D-3F5D-4447-BA0A-EEC9CDC03CAB"}]}]}],"references":[{"url":"http://www.attrition.org/pipermail/vim/2006-August/000984.html","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/443911/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/19625","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://www.attrition.org/pipermail/vim/2006-August/000984.html","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/443911/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/19625","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]}]}},{"cve":{"id":"CVE-2006-5934","sourceIdentifier":"cve@mitre.org","published":"2006-11-16T00:07:00.000","lastModified":"2026-06-16T22:32:10.060","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in admin/default.asp in Estate Agent Manager 1.3 and earlier allows remote attackers to execute arbitrary SQL commands via the UserName field."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en admin/default.asp en Estate Agent Manager 1.3 y anteriores permiten a un atacante remoto ejecutar comandos SQL de su elección a través del campo UserName."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:iexpress:estate_agent_manager:1.3:*:*:*:*:*:*:*","matchCriteriaId":"96F6C599-8C0A-438A-A041-16958D637D3B"}]}]}],"references":[{"url":"http://secunia.com/advisories/22835","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/1872","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/archive/1/451299/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/21103","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/4510","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30216","source":"cve@mitre.org"},{"url":"https://www.exploit-db.com/exploits/2773","source":"cve@mitre.org"},{"url":"http://secunia.com/advisories/22835","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/1872","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/archive/1/451299/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/21103","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4510","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30216","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://www.exploit-db.com/exploits/2773","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-5955","sourceIdentifier":"cve@mitre.org","published":"2006-11-17T00:07:00.000","lastModified":"2026-06-16T22:32:12.250","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SQL injection vulnerability in listings.asp in 20/20 DataShed (aka Real Estate Listing System) allows remote attackers to execute arbitrary SQL commands via the itemID parameter.  NOTE: some of these details are obtained from third party information."},{"lang":"es","value":"Vulnerabilidad de inyección SQL en listings.asp en 20/20 DataShed (también conocido como Real Estate Listing System)permite a un atacante remoto ejecutar comandos SQL de su elección a través del parámetro itemID. NOTA: algunos de estos detalles se obutiveron de terceras fuentes de información."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:20_20_applications:20_20_datashed:*:*:*:*:*:*:*:*","matchCriteriaId":"87177B08-FD63-4256-838C-FB679BE57C04"}]}]}],"references":[{"url":"http://aria-security.net/advisory/Real%20Estate%20Listing%20System.txt","source":"cve@mitre.org","tags":["Exploit"]},{"url":"http://secunia.com/advisories/22894","source":"cve@mitre.org","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/451503/100/200/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/21109","source":"cve@mitre.org"},{"url":"http://www.vupen.com/english/advisories/2006/4526","source":"cve@mitre.org"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30258","source":"cve@mitre.org"},{"url":"http://aria-security.net/advisory/Real%20Estate%20Listing%20System.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"http://secunia.com/advisories/22894","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/451503/100/200/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/21109","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.vupen.com/english/advisories/2006/4526","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30258","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},{"cve":{"id":"CVE-2006-6067","sourceIdentifier":"cve@mitre.org","published":"2006-11-22T02:07:00.000","lastModified":"2026-06-16T22:32:24.150","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Multiple SQL injection vulnerabilities in 20/20 DataShed (aka Real Estate Listing System) allow remote attackers to execute arbitrary SQL commands via the (1) itemID parameter to (a) f-email.asp, or the (2) peopleID and (2) sort_order parameters to (b) listings.asp, different vectors than CVE-2006-5955."},{"lang":"es","value":"Múltiples vulnerabilidades de inyección SQL en   \r\n20/20 DataShed (también conocido como Real Estate Listing System) permite a atacantes remotos ejecutar comandos SQL de su elección mediante el parámetro (1) itemID en (a) f-email.asp, ó (2) peopleID y (2) sort_order en (b) listings.asp, vectores distintos a CVE-2006-5955."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:20_20_applications:20_20_datashed:1.0:*:*:*:*:*:*:*","matchCriteriaId":"F96FA09A-7289-4EF1-BC82-EABA37F493A0"}]}]}],"references":[{"url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=40","source":"cve@mitre.org","tags":["Exploit","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/451962/100/0/threaded","source":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/21156","source":"cve@mitre.org","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30402","source":"cve@mitre.org"},{"url":"http://s-a-p.ca/index.php?page=OurAdvisories&id=40","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory","URL Repurposed"]},{"url":"http://www.securityfocus.com/archive/1/451962/100/0/threaded","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/21156","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/30402","source":"af854a3a-2127-422b-91ae-364da2661108"}]}}]}