CVE-2009-4477 - SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter

HIGH

SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter

Published Dec 30, 2009

7.5

HIGH

CVSS 2.0

EPSS 1.01%

SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://osvdb.org/57670		vdb-entryx_refsource_OSVDB
http://secunia.com/advisories/36529		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.exploit-db.com/exploits/9565		exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilities/52968		vdb-entryx_refsource_XF

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Dec 30, 2009

Updated Aug 7, 2024

Reserved Dec 30, 2009

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a