CVE-2006-5886
SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter.
Date published : 2006-11-14
http://www.securityfocus.com/bid/21017
http://www.securityfocus.com/archive/1/451331/100/0/threaded
