CVE-2007-4111

SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as user or manager, allows remote attackers to execute arbitrary SQL commands via the Password parameter.

Link	Resource
http://outlaw.aria-security.info/?p=10
http://www.securityfocus.com/bid/25115
http://secunia.com/advisories/26268	Vendor Advisory
http://securityreason.com/securityalert/2949
https://exchange.xforce.ibmcloud.com/vulnerabilities/35667
http://www.securityfocus.com/archive/1/474934/100/0/threaded

Configuration 1

cpe:2.3:a:codewidgets:real_estate_listing_website_application_template:*:*:*:*:*:*:*:*

---

Published : 2007-07-31 10:17

Updated : 2018-10-15 09:33

---

NVD link : CVE-2007-4111

Mitre link : CVE-2007-4111

No products.

NVD-CWE-Other