CVE-2012-4258
myrephp myre real estate software: no CVSS score yet. EPSS 1.1% chance of exploitation in the next 30 days.
Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.
- EPSS
- 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- myrephp:myre_real_estate_software
References
- http://packetstormsecurity.org/files/112480/MYRE-Real-Estate-Mobile-2012-2-Cross-Site-Scripting-SQL-Injection.html
- http://www.exploit-db.com/exploits/18843
- http://www.securityfocus.com/bid/53394
- http://www.vulnerability-lab.com/get_content.php?id=516
- http://packetstormsecurity.org/files/112480/MYRE-Real-Estate-Mobile-2012-2-Cross-Site-Scripting-SQL-Injection.html