Approved changes feed: RSS · Atom

cpe:2.3:a:widget_press:widget_property:1.1.19:*:*:*:*:*:*:*

part: a version: 1.1.19 update: *

VendorWidget Press (1acb70a0-5615-5dc9-8fa4-522de7abef48)
ProductWidget Property (a6564d1c-9ebd-598d-bec3-6cc4e12447f5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4017 not_vulnerable 2026-06-08 04:48:42.841582 Details available
property.php in Widget Property 1.1.19 allows remote attackers to obtain the full server path via an invalid lang value, which leaks the path in the resulting error message.
Published: 2005-12-05T11:00:00.000Z
Updated: 2024-08-07T23:31:48.786Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4016 vulnerable 2026-06-08 04:48:42.841105 Details available
SQL injection vulnerability in Widget Property 1.1.19 allows remote attackers to execute arbitrary SQL commands via the (1) property_id, (2) zip_code, (3) property_type_id, (4) price, and (5) city_id parameters to property.php.
Published: 2005-12-05T11:00:00.000Z
Updated: 2024-08-07T23:31:48.982Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.