CVE-2012-6586

CVE-2012-6586 describes multiple SQL injection vulnerabilities in MYRE Vacation Rental Software that allow remote attackers to execute arbitrary SQL commands via parameters in vacation/1_mobile/search.php (garage1, bathrooms1) or through input to vacation/widgate/request_more_information.php. The...

CVE-2012-6586

Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL commands via the 1 garage1 or 2 bathrooms1 parameter to vacation/1mobile/search.php, or 3 unspecified input to vacation/widgate/requestmoreinformation.php...

CVE-2012-6587

Cross-site scripting XSS vulnerability in vacation/1mobile/alertmembers.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the linkidd parameter in a login action...

PT-2013-2040

Name of the Vulnerable Software and Affected Versions MYRE Vacation Rental Software affected versions not specified Description The issue concerns SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL commands. This can be achieved through specific parameters in certa...

PT-2013-2041

Name of the Vulnerable Software and Affected Versions MYRE Vacation Rental Software affected versions not specified Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the link idd parameter in a login action. This occurs in th...

CVE-2012-6586: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL commands via the 1 garage1 or 2 bathrooms1 parameter to vacation/1mobile/search.php, or 3 unspecified input to vacation/widgate/requestmoreinformation.php...

CVE-2012-6587: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in vacation/1mobile/alertmembers.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the linkidd parameter in a login action...

MYREphp Vacation Rental Cross Site Scripting / SQL Injection

Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/vacation/ Tested on: Windows 7 Blog: d3b4g.me...

MYREphp Vacation Rental Software - Multiple Vulnerabilities

MYREphp Vacation Rental Software - Multiple Vulnerabilities Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/vacation/ Tested on: Windows 7 Blog: d3b4g.me...

MYREphp Vacation Rental Software Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/vacation/ Tested on: Windows 7 Blog: d3b4g.me...

MYREphp Vacation Rental Software - Multiple Vulnerabilities

Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/vacation/ Tested on: Windows 7 Blog: d3b4g.me...

CVE-2012-4324

Cross-site request forgery CSRF vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php...

CVE-2012-4324

Cross-site request forgery CSRF vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php...

CVE-2012-4324

CVE-2012-4324: CSRF in PHPJabbers Vacation Rental Script permits remote attackers to hijack administrator authentication by issuing requests that trigger adding admin accounts via the AdminUsers create action on index.php. The vulnerability detail explicitly identifies the affected software and t...

PT-2012-5326

Name of the Vulnerable Software and Affected Versions PHPJabbers Vacation Rental Script affected versions not specified Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a...

CVE-2012-4324: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in PHPJabbers Vacation Rental Script allows remote attackers to hijack the authentication of administrators for requests that add administrator accounts via a create action in the AdminUsers module to index.php...

Vacation Rental Listing Cross Site Request Forgery

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Vacation rental listing CSRF Add Admin

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Vacation Packages Listing SQL Injection

Exploit Title: VACATION PACKAGES LISTING Sql Injection Date: 19/03/2012 Author: r45c4l Script url: http://www.classifiedsgeek.com/vacation-packages/ Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...