CVE-2006-5886

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-14 · updated 2026-06-16

Description

SQL injection vulnerability in propertysdetails.asp in Dynamic Dataworx NuRealestate (NuRems) 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the PropID parameter.

Affected products

Dynamic Dataworx Nurealestate: 1.0

References

http://secunia.com/advisories/22828
http://securityreason.com/securityalert/1850
http://www.securityfocus.com/archive/1/451331/100/0/threaded
http://www.securityfocus.com/bid/21017
http://www.vupen.com/english/advisories/2006/4469
https://exchange.xforce.ibmcloud.com/vulnerabilities/30194
https://www.exploit-db.com/exploits/2755
http://secunia.com/advisories/22828
http://securityreason.com/securityalert/1850
http://www.securityfocus.com/archive/1/451331/100/0/threaded
http://www.securityfocus.com/bid/21017
http://www.vupen.com/english/advisories/2006/4469

Get alerted when CVE-2006-5886 or the next vulnerability affects your stack