CVEvulnerability
CVE-2007-4111
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-07-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as user or manager, allows remote attackers to execute arbitrary SQL commands via the Password parameter.
Affected configurations
• codewidgets real estate listing website application template
References
- http://outlaw.aria-security.info/?p=10 outlaw.aria-security.info
- http://secunia.com/advisories/26268 Vendor Advisory
- http://securityreason.com/securityalert/2949 securityreason.com
- http://www.securityfocus.com/archive/1/474934/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25115 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35667 exchange.xforce.ibmcloud.com
- http://outlaw.aria-security.info/?p=10 outlaw.aria-security.info
- http://secunia.com/advisories/26268 Vendor Advisory
- http://securityreason.com/securityalert/2949 securityreason.com
- http://www.securityfocus.com/archive/1/474934/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25115 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35667 exchange.xforce.ibmcloud.com