CVE-2012-6587

CVE-2012-6587 describes an XSS vulnerability in MYRE Vacation Rental Software, specifically in the file vacation/1_mobile/alert_members.php where an attacker can inject arbitrary script/HTML via the link_idd parameter during a login action. The issue enables remote script execution by manipulatin...

CVE-2012-6586

CVE-2012-6586 describes multiple SQL injection vulnerabilities in MYRE Vacation Rental Software that allow remote attackers to execute arbitrary SQL commands via parameters in vacation/1_mobile/search.php (garage1, bathrooms1) or through input to vacation/widgate/request_more_information.php. The...