CVE-2010-4738

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
VendorProductVersion
raemediareal_estate_single_and_multi_agent_system
3.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/69627
http://osvdb.org/69628
http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt
http://secunia.com/advisories/42515
http://securityreason.com/securityalert/8080
http://securityreason.com/securityalert/8082
http://securityreason.com/securityalert/8088
http://www.securityfocus.com/bid/45211
http://www.securityfocus.com/bid/45212
http://osvdb.org/69627
http://osvdb.org/69628
http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt
http://secunia.com/advisories/42515
http://securityreason.com/securityalert/8080
http://securityreason.com/securityalert/8082
http://securityreason.com/securityalert/8088
http://www.securityfocus.com/bid/45211
http://www.securityfocus.com/bid/45212