high7.5Public exploit code
CVE-2012-4258
Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd par…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Myre Real Estate Mobile 2012 - Multiple Vulnerabilities2012-06-14 · webapps · php · Verified
- Myre Real Estate Mobile 2012/2 - Multiple Vulnerabilities2012-05-07 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myrephp | Myre Real Estate Software | Version 2012 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/112480/MYRE-Real-Estate-Mobile-2012-2-Cross-Site-Scripting-SQL-Injection.html
- http://www.exploit-db.com/exploits/18843
- http://www.securityfocus.com/bid/53394
- http://www.vulnerability-lab.com/get_content.php?id=516
- http://packetstormsecurity.org/files/112480/MYRE-Real-Estate-Mobile-2012-2-Cross-Site-Scripting-SQL-Injection.html
- http://www.exploit-db.com/exploits/18843
- http://www.securityfocus.com/bid/53394
- http://www.vulnerability-lab.com/get_content.php?id=516