CVE-2009-4615

CVE-2009-4615 affects MYRE Holiday Rental Manager (review.php) via the show_review action, where the link_id parameter is vulnerable to SQL injection due to unsanitized input. Root cause: improper handling of user-supplied data in a SQL context. Impact: allows remote attackers to execute arbitrar...

CVE-2009-4616

Cross-site scripting vulnerability (CVE-2009-4616) exists in MYRE Holiday Rental Manager’s search.php, allowing remote attackers to inject arbitrary web script or HTML through the cat_id1 parameter. The affected component is the search function in MYRE Holiday Rental Manager; the root cause is un...