Search criteria

1 vulnerability by raemedia

CVE-2010-4738 (GCVE-0-2010-4738)

Vulnerability from cvelistv5 – Published: 2011-02-16 01:00 – Updated: 2024-08-07 03:55
VLAI
Summary
Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System.
Severity
No CVSS data available.
CWE
  • n/a
Assigner
References
URL Tags
http://www.securityfocus.com/bid/45212 vdb-entryx_refsource_BID
http://osvdb.org/69628 vdb-entryx_refsource_OSVDB
http://packetstormsecurity.org/files/view/96389/r… x_refsource_MISC
http://www.securityfocus.com/bid/45211 vdb-entryx_refsource_BID
http://secunia.com/advisories/42515 third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/8080 third-party-advisoryx_refsource_SREASON
http://securityreason.com/securityalert/8082 third-party-advisoryx_refsource_SREASON
http://osvdb.org/69627 vdb-entryx_refsource_OSVDB
http://securityreason.com/securityalert/8088 third-party-advisoryx_refsource_SREASON
Date Public
2010-12-05 00:00
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T03:55:35.197Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "45212",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/45212"
          },
          {
            "name": "69628",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/69628"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt"
          },
          {
            "name": "45211",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/45211"
          },
          {
            "name": "42515",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42515"
          },
          {
            "name": "8080",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8080"
          },
          {
            "name": "8082",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8082"
          },
          {
            "name": "69627",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/69627"
          },
          {
            "name": "8088",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8088"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2010-12-05T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-09-22T09:00:00.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "45212",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/45212"
        },
        {
          "name": "69628",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/69628"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt"
        },
        {
          "name": "45211",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/45211"
        },
        {
          "name": "42515",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42515"
        },
        {
          "name": "8080",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8080"
        },
        {
          "name": "8082",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8082"
        },
        {
          "name": "69627",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/69627"
        },
        {
          "name": "8088",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8088"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2010-4738",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "45212",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/45212"
            },
            {
              "name": "69628",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/69628"
            },
            {
              "name": "http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt",
              "refsource": "MISC",
              "url": "http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt"
            },
            {
              "name": "45211",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/45211"
            },
            {
              "name": "42515",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/42515"
            },
            {
              "name": "8080",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8080"
            },
            {
              "name": "8082",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8082"
            },
            {
              "name": "69627",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/69627"
            },
            {
              "name": "8088",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8088"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2010-4738",
    "datePublished": "2011-02-16T01:00:00.000Z",
    "dateReserved": "2011-02-15T00:00:00.000Z",
    "dateUpdated": "2024-08-07T03:55:35.197Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}