high7.5Public exploit code
CVE-2012-6586
Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL commands via the (1) garage1 or (2) bat…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MYREphp Vacation Rental Software - Multiple Vulnerabilities2012-11-14 · webapps · php · Verified
Impact
Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL commands via the (1) garage1 or (2) bathrooms1 parameter to vacation/1_mobile/search.php, or (3) unspecified input to vacation/widgate/request_more_information.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Myrephp | Myre Vacation Rental | All versions |