CVE-2005-4016

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.12%

Published

Dec 5, 2005

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBWidget Property 1.1.19 - 'Property.php' SQL Injection

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the (1) property_id, (2) zip_code, (3) property_type_id, (4) price, and (5) city_id parameters to property.php.

Affected Products (1)

widget_press · widget_propertyvulnerable

References (10)

http://pridels0.blogspot.com/2005/12/widget-property-vuln.html

http://secunia.com/advisories/17829

http://www.osvdb.org/21426

http://www.securityfocus.com/bid/15701

http://www.vupen.com/english/advisories/2005/2741

http://pridels0.blogspot.com/2005/12/widget-property-vuln.html

http://secunia.com/advisories/17829

http://www.osvdb.org/21426

http://www.securityfocus.com/bid/15701

http://www.vupen.com/english/advisories/2005/2741

KEV Catalog EPSS Scores Vendors All CVEs