PT-2011-4428 · Myre · Myre Real Estate

Sooraj K.S · Publicado 2011-09-15 · Atualizado 2012-02-14 · CVE-2011-3394

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MYRE Real Estate Software (affected versions not specified)

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting a SQL injection vulnerability in the findagent.php file via the page parameter in the API endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2011-3394

Produtos afetados

Myre Real Estate

Referências · 4

• 🔥 http://secpod.org/advisories/SECPOD_MRS_SQL_XSS_Vuln.txt · Exploit
• 🔥 https://exploit-db.com/exploits/17811 · Exploit
• http://securityreason.com/securityalert/8376 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3394 · Nota de Segurança