CVE-2008-5774

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-12-30 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in ASPSiteWare HomeBuilder 1.0 and 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) iType parameter to (a) type.asp and (b) type2.asp and the (2) iPro parameter to (c) detail.asp.

Affected products

Aspsiteware Homebuilder: 1.0, 2.0

References

http://secunia.com/advisories/33172
http://www.securityfocus.com/bid/32812
https://exchange.xforce.ibmcloud.com/vulnerabilities/47319
https://www.exploit-db.com/exploits/7462
http://secunia.com/advisories/33172
http://www.securityfocus.com/bid/32812
https://exchange.xforce.ibmcloud.com/vulnerabilities/47319
https://www.exploit-db.com/exploits/7462

Get alerted when CVE-2008-5774 or the next vulnerability affects your stack