CVE-2010-4738

Published Feb 16, 2011

Last updated 13 years ago

Overview

Description: Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-89

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:raemedia:real_estate_single_and_multi_agent_system:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "51DCF3ED-A413-4FA4-A537-4025C199542E"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References