PT-2011-1688

Name of the Vulnerable Software and Affected Versions Rae Media INC Real Estate Single and Multi Agent System version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the probe parameter to two specific API endpoints: "multi/city.asp" in th...

CVE-2010-4738: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Rae Media INC Real Estate Single and Multi Agent System 3.0 allow remote attackers to execute arbitrary SQL commands via the probe parameter to 1 multi/city.asp in the Multi Agent System and 2 resulttype.asp in the Single Agent System...