CVE-2008-4177 SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter.

HighCVSS 7.5 EPSS 0.97% Public exploit

Published: 2008-09-23 18:00
Updated: 2026-06-17 01:57
Exploit status: Public exploit available

Sign in for asset impact Search another CVE

Description

SQL injection vulnerability in search.php in Pre Real Estate Listings allows remote attackers to execute arbitrary SQL commands via the c parameter.

Affected products

Product	Affected versions	Fixed in
preprojects pre real estate listings	All versions	No fix listed

References

4310 third-party-advisory
31192 exploit vdb-entry
realestatewebsite-search-sql-injection(45151) vdb-entry
6465 exploit

CVSS v2.0

7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.97% (percentile 62.3)
CWE: CWE-89

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

Pre Real Estate Listings - 'search.php' SQL Injection Exploit · Exploit Database (OffSec) · 2008-09-15