<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: myrephp</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2012-6589: Cross-site scripting (XSS) vulnerability in search.php in MYRE Business Directory allows remote attackers to i</title><link>https://patchthecve.com/cve/CVE-2012-6589.html</link><guid>https://patchthecve.com/cve/CVE-2012-6589.html</guid><pubDate>Tue, 16 Jun 2026 23:48:25 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in search.php in MYRE Business Directory allows remote attackers to inject arbitrary web script or HTML via the look parameter.</description></item><item><title>CVE-2012-6588: SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitra</title><link>https://patchthecve.com/cve/CVE-2012-6588.html</link><guid>https://patchthecve.com/cve/CVE-2012-6588.html</guid><pubDate>Tue, 16 Jun 2026 23:48:25 +0000</pubDate><description>HIGH 7.5: SQL injection vulnerability in links.php in MYRE Business Directory allows remote attackers to execute arbitrary SQL commands via the cat parameter.</description></item><item><title>CVE-2012-6587: Cross-site scripting (XSS) vulnerability in vacation/1_mobile/alert_members.php in MYRE Vacation Rental Softwa</title><link>https://patchthecve.com/cve/CVE-2012-6587.html</link><guid>https://patchthecve.com/cve/CVE-2012-6587.html</guid><pubDate>Tue, 16 Jun 2026 23:48:25 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in vacation/1_mobile/alert_members.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the link_idd parameter in a login action.</description></item><item><title>CVE-2012-6586: Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbi</title><link>https://patchthecve.com/cve/CVE-2012-6586.html</link><guid>https://patchthecve.com/cve/CVE-2012-6586.html</guid><pubDate>Tue, 16 Jun 2026 23:48:25 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL commands via the (1) garage1 or (2) bathrooms1 parameter to vacation/1_mobile/search.php, or (3) unspecified input to vacation/widgate/request_more_information.php.</description></item><item><title>CVE-2012-6585: Cross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote attackers to injec</title><link>https://patchthecve.com/cve/CVE-2012-6585.html</link><guid>https://patchthecve.com/cve/CVE-2012-6585.html</guid><pubDate>Tue, 16 Jun 2026 23:48:25 +0000</pubDate><description>MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in search.php in MYRE Realty Manager allows remote attackers to inject arbitrary web script or HTML via the cat_id1 parameter.</description></item><item><title>CVE-2012-6584: Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL </title><link>https://patchthecve.com/cve/CVE-2012-6584.html</link><guid>https://patchthecve.com/cve/CVE-2012-6584.html</guid><pubDate>Tue, 16 Jun 2026 23:48:25 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in MYRE Realty Manager allow remote attackers to execute arbitrary SQL commands via the bathrooms1 parameter to (1) demo2/search.php or (2) search.php.</description></item><item><title>CVE-2012-4258: Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execut</title><link>https://patchthecve.com/cve/CVE-2012-4258.html</link><guid>https://patchthecve.com/cve/CVE-2012-4258.html</guid><pubDate>Tue, 16 Jun 2026 23:44:43 +0000</pubDate><description>HIGH 7.5: Multiple SQL injection vulnerabilities in MYRE Real Estate Software (2012 Q2) allow remote attackers to execute arbitrary SQL commands via the (1) link_idd parameter to 1_mobile/listings.php or (2) userid parameter to 1_mobile/agentprofile.php.</description></item></channel></rss>