Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

1 vulnerability by raemedia

CVE-2010-4738 (GCVE-0-2010-4738)

Vulnerability from cvelistv5 – Published: 2011-02-16 01:00 – Updated: 2024-08-07 03:55
VLAI?
Summary
Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://www.securityfocus.com/bid/45212 vdb-entryx_refsource_BID
http://osvdb.org/69628 vdb-entryx_refsource_OSVDB
http://packetstormsecurity.org/files/view/96389/r… x_refsource_MISC
http://www.securityfocus.com/bid/45211 vdb-entryx_refsource_BID
http://secunia.com/advisories/42515 third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/8080 third-party-advisoryx_refsource_SREASON
http://securityreason.com/securityalert/8082 third-party-advisoryx_refsource_SREASON
http://osvdb.org/69627 vdb-entryx_refsource_OSVDB
http://securityreason.com/securityalert/8088 third-party-advisoryx_refsource_SREASON
Date Public ?
2010-12-05 00:00
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:55:35.197Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "45212",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/45212"
          },
          {
            "name": "69628",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/69628"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt"
          },
          {
            "name": "45211",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/45211"
          },
          {
            "name": "42515",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42515"
          },
          {
            "name": "8080",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8080"
          },
          {
            "name": "8082",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8082"
          },
          {
            "name": "69627",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/69627"
          },
          {
            "name": "8088",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8088"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-12-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-09-22T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "45212",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/45212"
        },
        {
          "name": "69628",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/69628"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt"
        },
        {
          "name": "45211",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/45211"
        },
        {
          "name": "42515",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42515"
        },
        {
          "name": "8080",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8080"
        },
        {
          "name": "8082",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8082"
        },
        {
          "name": "69627",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/69627"
        },
        {
          "name": "8088",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8088"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-4738",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "45212",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/45212"
            },
            {
              "name": "69628",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/69628"
            },
            {
              "name": "http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt"
            },
            {
              "name": "45211",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/45211"
            },
            {
              "name": "42515",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/42515"
            },
            {
              "name": "8080",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8080"
            },
            {
              "name": "8082",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8082"
            },
            {
              "name": "69627",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/69627"
            },
            {
              "name": "8088",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8088"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-4738",
    "datePublished": "2011-02-16T01:00:00.000Z",
    "dateReserved": "2011-02-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T03:55:35.197Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}