Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MYRE Real Estate Mobile多个SQL注入漏洞
Vulnerability Description
MYRE Real Estate Software (2012 Q2)中存在多个SQL注入漏洞,这些漏洞源于对用户提供的输入数据未经充分验证。攻击者可利用这些漏洞操控应用程序,访问或修改数据,在底层数据库中利用这些漏洞,在受影响站点上下文中执行HTML和脚本代码,盗取基于cookie的认证证书或者控制网站传达给用户的方式,也可能执行其他的攻击。
CVSS Information
N/A
Vulnerability Type
N/A