4.3
CVSSv2

CVE-2009-4478

Published: 30/12/2009 Updated: 19/09/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Multiple cross-site scripting (XSS) vulnerabilities in Xstate Real Estate 1.0 allow remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to (1) home.html or (2) lands.html.

Vulnerable Product Search on Vulmon Subscribe to Product

xstate real estate 1.0

Exploits

/* _____ _ ___ __ | ____|_ _(_) \ \ / /_ _ _ _ | _| \ \ / / | |\ \ /\ / / _` | | | | | |___ \ V /| | | \ V V / (_| | |_| | |_____| \_/ |_|_| \_/\_/ \__,_|\__, | |___/ ...