CVE-2006-6807

This exploit demonstrates a SQL injection vulnerability in Ananda Real Estate <= 3.4 via the 'agent' parameter in list.asp. The provided URL-encoded payload extracts username and password from the 'user' table.

The exploit demonstrates SQL injection vulnerabilities in Ananda Real Estate 3.4's 'list.asp' by injecting malicious SQL syntax via multiple parameters (city, state, country, minprice, maxprice, bed, bath). The payloads use URL-encoded quotes and 'union insect' to trigger SQL errors or data leakage.