CVE-2012-6584

2022-10-0316:15:27

mitre

www.cve.org

sql injection

myre realty manager

remote attackers

arbitrary sql commands

bathrooms parameter

8.5 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

50.6%

JSON

Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands via the bathrooms1 parameter to (1) demo2/search.php or (2) search.php.

References

www.exploit-db.com/exploits/22713/