CVEvulnerability
CVE-2010-4738
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-02-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System.
Affected configurations
• raemedia real estate single and multi agent system 3.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/69627 Exploit
- http://osvdb.org/69628 osvdb.org
- http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt Exploit
- http://secunia.com/advisories/42515 Vendor Advisory
- http://securityreason.com/securityalert/8080 securityreason.com
- http://securityreason.com/securityalert/8082 securityreason.com
- http://securityreason.com/securityalert/8088 securityreason.com
- http://www.securityfocus.com/bid/45211 Exploit
- http://www.securityfocus.com/bid/45212 Exploit
- http://osvdb.org/69627 Exploit
- http://osvdb.org/69628 osvdb.org
- http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt Exploit
- http://secunia.com/advisories/42515 Vendor Advisory
- http://securityreason.com/securityalert/8080 securityreason.com
- http://securityreason.com/securityalert/8082 securityreason.com
- http://securityreason.com/securityalert/8088 securityreason.com
- http://www.securityfocus.com/bid/45211 Exploit
- http://www.securityfocus.com/bid/45212 Exploit