EUVD-2012-4202

Malware in sbrugna...

EUVD-2011-3357

Malware in sbrugna...

EUVD-2011-3356

Malware in sbrugna...

CVE-2012-4258

Multiple SQL injection vulnerabilities in MYRE Real Estate Software 2012 Q2 allow remote attackers to execute arbitrary SQL commands via the 1 linkidd parameter to 1mobile/listings.php or 2 userid parameter to 1mobile/agentprofile.php...

MYRE Real Estate Software Multiple Vulnerabilities

No description provided by source. Title : MYRE Real Estate Software Multiple XSS and SQL Injection Vulnerabilities Author : Sooraj K.S SecPod Technologies www.secpod.com Vendor : http://myrephp.com Advisory : http://secpod.org/blog/?p=346 http://secpod.org/advisories/SECPODMRSSQLXSSVuln.txt...

CVE-2012-4258

Multiple SQL injection vulnerabilities in MYRE Real Estate Software 2012 Q2 allow remote attackers to execute arbitrary SQL commands via the 1 linkidd parameter to 1mobile/listings.php or 2 userid parameter to 1mobile/agentprofile.php...

Sql injection

Multiple SQL injection vulnerabilities in MYRE Real Estate Software 2012 Q2 allow remote attackers to execute arbitrary SQL commands via the 1 linkidd parameter to 1mobile/listings.php or 2 userid parameter to 1mobile/agentprofile.php...

CVE-2012-4258

CVE-2012-4258 involves multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2). The affected components are the 1_mobile/listings.php (parameter: link_idd) and 1_mobile/agentprofile.php (parameter: userid). The underlying issue is unsafeguarded input leading to arbitrary SQL...

PT-2012-5286

Name of the Vulnerable Software and Affected Versions MYRE Real Estate Software version 2012 Q2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the link idd parameter to "1 mobile/listings.php" or the userid parameter to "1...

CVE-2012-4258: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MYRE Real Estate Software 2012 Q2 allow remote attackers to execute arbitrary SQL commands via the 1 linkidd parameter to 1mobile/listings.php or 2 userid parameter to 1mobile/agentprofile.php...

CVE-2011-3394

SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2011-3393

Multiple cross-site scripting XSS vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject arbitrary web script or HTML via the 1 country1, 2 state1, or 3 city1 parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject arbitrary web script or HTML via the 1 country1, 2 state1, or 3 city1 parameter...

CVE-2011-3393

CVE-2011-3393 concerns MYRE Real Estate Software, where multiple XSS vulnerabilities exist in findagent.php. The issue allows remote attackers to inject arbitrary script/HTML via the country1, state1, or city1 parameters, enabling potential client-side script execution and impact on user sessions...

CVE-2011-3394

CVE-2011-3394 concerns MYRE Real Estate Software, with the vulnerability described as an SQL injection in findagent.php via the page parameter. The connected documents corroborate the affected software and vulnerability class but do not provide additional technical specifics such as affected vers...

CVE-2011-3393

Multiple cross-site scripting XSS vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject arbitrary web script or HTML via the 1 country1, 2 state1, or 3 city1 parameter...

CVE-2011-3394: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in findagent.php in MYRE Real Estate Software allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2011-4427

Name of the Vulnerable Software and Affected Versions MYRE Real Estate Software affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the findagent.php file. These vulnerabilities allow remote attackers to inject arbitrary web script o...

PT-2011-4428

Name of the Vulnerable Software and Affected Versions MYRE Real Estate Software affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the findagent.php file via the page...

CVE-2011-3393: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in findagent.php in MYRE Real Estate Software allow remote attackers to inject arbitrary web script or HTML via the 1 country1, 2 state1, or 3 city1 parameter...