CVE-2010-4738

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2011-02-16 · updated 2026-06-16
Weakness: CWE-89

Description

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to (1) multi/city.asp in the Multi Agent System and (2) resulttype.asp in the Single Agent System.

Affected products

Raemedia Real Estate Single And Multi Agent System: 3.0

References

http://osvdb.org/69627
http://osvdb.org/69628
http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt
http://secunia.com/advisories/42515
http://securityreason.com/securityalert/8080
http://securityreason.com/securityalert/8082
http://securityreason.com/securityalert/8088
http://www.securityfocus.com/bid/45211
http://www.securityfocus.com/bid/45212
http://osvdb.org/69627
http://osvdb.org/69628
http://packetstormsecurity.org/files/view/96389/raemediaincresmas-sql.txt

Get alerted when CVE-2010-4738 or the next vulnerability affects your stack