7.5
CVSSv2

CVE-2012-6584

Published: 25/08/2013 Updated: 27/08/2013
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote malicious users to execute arbitrary SQL commands via the bathrooms1 parameter to (1) demo2/search.php or (2) search.php.

Vulnerable Product Search on Vulmon Subscribe to Product

myrephp myre realty manager -

Exploits

# Exploit Title:MYRE Realty Manager Multiple Vulnerabilities # Date: 1310201 # Exploit Author: d3b4g # Vendor Homepage:myrephpcom # Software Link: myrephpcom/demo2/ # Tested on: Windows 7 # Blog: d3b4gme ---------------------------------------------------------------------------------- () SQL Injection : -------------- ...