CVE-2010-4738

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 1.8%

from disclosure to weapon0 days

Published on NVDFeb 16

1st PoCFeb 16

exploitation probability

1.8%top 24% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16179 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16178 cve_referencepacketstormsecurity.org/files/view/96389/raemediaincresmas-sql.txtunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/69627 http://osvdb.org/69628 http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt http://secunia.com/advisories/42515 http://securityreason.com/securityalert/8080 http://securityreason.com/securityalert/8082 http://securityreason.com/securityalert/8088 http://www.securityfocus.com/bid/45211 http://www.securityfocus.com/bid/45212