← All advisories

Unrated severityNVD Advisory· Published Dec 30, 2009· Updated Jun 16, 2026

CVE-2009-4477

CVE-2009-4477

Description

SQL injection vulnerability in page.html in Xstate Real Estate 1.0 allows remote attackers to execute arbitrary SQL commands via the pid parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Phpstore/Real Estate2 versions
cpe:2.3:a:xstate:real_estate:1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:xstate:real_estate:1.0:*:*:*:*:*:*:*
- (no CPE)range: =1.0

Patches

Vulnerability mechanics

References

4

secunia.com/advisories/36529nvdVendor Advisory
osvdb.org/57670nvd
www.exploit-db.com/exploits/9565nvd
exchange.xforce.ibmcloud.com/vulnerabilities/52968nvd

News mentions

0

No linked articles in our index yet.