NetSight
high7.5

CVE-2009-3497

SQL injection vulnerability in view_listing.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL comma…

Impact

SQL injection vulnerability in view_listing.php in Vastal I-Tech Agent Zone (aka The Real Estate Script) allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

VendorProductAffected versions
VastalAgent Zone
All versions

Weakness classification

References