CVE-2012-6585

CVE-2012-6585 : Cross-site scripting (XSS) in MYRE Realty Manager’s search.php allows remote attackers to inject arbitrary script via the cat_id1 parameter. Affected: MYRE Realty Manager, component: search.php, parameter: cat_id1. Exploitability: remote, no authentication; impact: partial integri...

CVE-2012-6584

CVE-2012-6584 concerns multiple SQL injection vulnerabilities in the MYRE Realty Manager application. The flaw allows remote attackers to execute arbitrary SQL commands through the bathrooms1 parameter in either demo2/search.php or search.php. The vulnerability is due to improper input handling i...