CVE-2008-5772: Multiple SQL injection vulnerabilities in ASPSiteWare RealtyListings 1.0 and 2.0 allow remote attackers to...

Security readout for executives and security teams

This CVE affects legacy ASPSiteWare RealtyListings 1.0 and 2.0. A remote attacker may be able to manipulate database queries through public page parameters, potentially reading or changing site data. The sources do not provide a CVSS score, patch status, or evidence of active exploitation. Likely exposure is limited to internet-facing sites still running ASPSiteWare RealtyListings 1.0 or 2.0, especially legacy ASP deployments with type.asp or detail.asp reachable. The bundle does not provide CPEs, asset fingerprints, or hosting prevalence. Prioritize remediation if the product is internet-facing or handles customer, property, or lead data. The issue is old, public, and database-impacting, but source evidence is incomplete on patch availability and active exploitation. Mitigation focus: Check vendor or maintainer guidance for a fixed version or official workaround.; Retire or replace RealtyListings 1.0 and 2.0 if no supported fix exists.; Remove public access to vulnerable pages where business use is not required..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.