Sql injection

Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands via the bathrooms1 parameter to 1 demo2/search.php or 2 search.php...

PT-2013-2038

Name of the Vulnerable Software and Affected Versions MYRE Realty Manager affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the bathrooms1 parameter to API endpoints such as "/demo2/search.php" or "/search.php"...