Security Advisory

CVE-2012-4258

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-08-13 18:00:00
Last updated 2024-09-17 00:21:34
Assigner mitre
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.