Remedia · Rae Media Inc Real Estate Single/Multi Agent System · CVE-2010-4738
**Name of the Vulnerable Software and Affected Versions**
Rae Media INC Real Estate Single and Multi Agent System version 3.0
**Description**
The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the `probe` parameter to two specific API endpoints: "multi/city.asp" in the Multi Agent System and "resulttype.asp" in the Single Agent System.
**Recommendations**
For Rae Media INC Real Estate Single and Multi Agent System version 3.0, consider restricting access to the "multi/city.asp" and "resulttype.asp" endpoints to minimize the risk of exploitation. Avoid using the `probe` parameter in these endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.