CVE-2006-6807 Information

Description

SQL injection vulnerability in list.asp in Softwebs Nepal (aka Ananda Raj Pandey) Ananda Real Estate 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the agent parameter.

Reference

http://secunia.com/advisories/23506 http://www.securityfocus.com/bid/21771 http://www.vupen.com/english/advisories/2006/5179 https://www.exploit-db.com/exploits/3001