CVE-2007-4111

Published: Jul 31, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as user or manager, allows remote attackers to execute arbitrary SQL commands via the Password parameter.

Affected (1)

Products: Codewidgets: Real Estate Listing Website Application Template

Codewidgets

1 product

Real Estate Listing Website Application Template

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Codewidgets Real Estate Listing Website Application Template	All versions

References (12)

http://outlaw.aria-security.info/?p=10

Source: cve@mitre.org

http://secunia.com/advisories/26268

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/2949

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/474934/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25115

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35667

Source: cve@mitre.org

http://outlaw.aria-security.info/?p=10