Published: 16/02/2011 Updated: 22/09/2011

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote malicious users to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System.

Vulnerable Product	Search on Vulmon	Subscribe to Product
raemedia real estate single and multi agent system 3.0

source: wwwsecurityfocuscom/bid/45211/info Real Estate Single is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the ...

source: wwwsecurityfocuscom/bid/45212/info Multi Agent System is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query Exploiting this issue could allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the ...

CWE-89 http://www.securityfocus.com/bid/45212 http://secunia.com/advisories/42515 http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt http://osvdb.org/69628 http://osvdb.org/69627 http://www.securityfocus.com/bid/45211 http://securityreason.com/securityalert/8082 http://securityreason.com/securityalert/8080 http://securityreason.com/securityalert/8088 https://nvd.nist.gov https://www.exploit-db.com/exploits/16178/

CVE-2010-4738

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect