Lucene search

K
cve[email protected]CVE-2012-4258
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2012-4258

2022-10-0316:15:35
CWE-89
web.nvd.nist.gov
19
cve
2012
4258
sql injection
myre real estate software
remote attackers
arbitrary sql commands
nvd

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.9%

Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.

Affected configurations

NVD
Node
myrephpmyre_real_estate_softwareMatch2012q2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.8 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.9%

Related for CVE-2012-4258