CVE-2012-4258
MYRE Real Estate Software 2012 Q2 - SQL Injection via link_idd or userid Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-4258. PoCs published by Vulnerability-Lab.
AI-analyzed exploit summary The exploit demonstrates SQL injection and XSS vulnerabilities in MYRE Real Estate Mobile 2012 Q2. It includes PoC URLs for both SQLi (via 'link_idd' and 'userid' parameters) and XSS (via 'bedrooms1' and 'price2' parameters).
Description
Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.
Exploits (2)
The exploit demonstrates SQL injection and XSS vulnerabilities in MYRE Real Estate Mobile 2012 Q2. It includes PoC URLs for both SQLi (via 'link_idd' and 'userid' parameters) and XSS (via 'bedrooms1' and 'price2' parameters).
The exploit demonstrates SQL injection and XSS vulnerabilities in MYRE Real Estate Mobile 2012 Q2. It includes PoC URLs for both SQLi (via `link_idd` and `userid` parameters) and XSS (via `bedrooms1` and `price2` parameters).