CVE-2007-4111

Real Estate listing website app < - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-4111. PoCs published by Aria-Security Team.

AI-analyzed exploit summary The exploit describes an SQL injection vulnerability in Real Estate Listing Website Application Template. It provides a basic example of an SQLi payload to bypass authentication by manipulating the password field.

Description

SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as user or manager, allows remote attackers to execute arbitrary SQL commands via the Password parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Aria-Security Team · textwebappsasp
https://www.exploit-db.com/exploits/30428

The exploit describes an SQL injection vulnerability in Real Estate Listing Website Application Template. It provides a basic example of an SQLi payload to bypass authentication by manipulating the password field.

Classification
Writeup 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: Real Estate Listing Website Application Template
No auth needed
Prerequisites: Valid username (e.g., 'admin')
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/35667
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/474934/100/0/threaded
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/2949
Various Sources x_refsource_misc
http://outlaw.aria-security.info/?p=10
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26268
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/25115

Scores

EPSS 0.0107
EPSS Percentile 60.4%

Details

Status published
Products (1)
codewidgets/real_estate_listing_website_application_template
Published Jul 31, 2007
Tracked Since Feb 18, 2026