PT-2011-1688

Name of the Vulnerable Software and Affected Versions Rae Media INC Real Estate Single and Multi Agent System version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the probe parameter to two specific API endpoints: "multi/city.asp" in th...