EUVD-2005-4011

Malware in sbrugna...

EUVD-2005-4012

Malware in sbrugna...

Widget Property 1.1.19 Property.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/15701/info Widget Press Widget Property is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'property.php' script before using it i...

CVE-2005-4016

SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the 1 propertyid, 2 zipcode, 3 propertytypeid, 4 price, and 5 cityid parameters to property.php...

CVE-2005-4017

property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message...

CVE-2005-4017

property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message...

CVE-2005-4017

The CVE-2005-4017 issue concerns Widget Property 1.1.19. The vulnerability is triggered by an invalid lang value in property.php that allows remote attackers to obtain the full server path, which is exposed in the resulting error message. The affected component is property.php within Widget Prope...

CVE-2005-4016

The CVE-2005-4016 entry describes an SQL injection vulnerability in Widget Property 1.1.19. The affected component is the property.php endpoint, where five parameters (property_id, zip_code, property_type_id, price, city_id) can be manipulated to execute arbitrary SQL commands. The issue enables ...

CVE-2005-4016

SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the 1 propertyid, 2 zipcode, 3 propertytypeid, 4 price, and 5 cityid parameters to property.php...

Widget Property 1.1.19 - Property.php SQL Injection

Widget Property 1.1.19 - Property.php SQL Injection source: https://www.securityfocus.com/bid/15701/info Widget Press Widget Property is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input to the 'property.php' script...