CVE-2009-3497

Vastal I-Tech Agent Zone - SQL Injection via view_listing.php id Parameter

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in view_listing.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the id parameter.

References (2)

Core 2
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/36812

Scores

EPSS 0.0113
EPSS Percentile 63.2%

Details

CWE
CWE-89
Status published
Products (1)
vastal/agent_zone
Published Sep 30, 2009
Tracked Since Feb 18, 2026