Rae Media INC Real Estate Single and Multi Agent System SQL Injection

2010-12-06
ID: 15036
CVE: None
Download vulnerable application: None
1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1
3                                                                      3
3             _     __       __    ________     __  __                 3
7           /' \  /'__`\   /'__`\ /\_____  \   /\ \/\ \                7
1          /\_, \/\_\L\ \ /\_\L\ \\/___//'/'   \_\ \ \ \____           1
3          \/_/\ \/_/_\_<_\/_/_\_<_   /' /'    /'_` \ \ '__`\          3
3             \ \ \/\ \L\ \ /\ \L\ \ /' /'    /\ \L\ \ \ \L\ \         3
7              \ \_\ \____/ \ \____//\_/      \ \___,_\ \_,__/         7
1               \/_/\/___/   \/___/ \//        \/__,_ /\/___/          1
3              >> Exploit database separated by exploit                3
3                     type (local, remote, DoS, etc.)                  3
7                                                                      7
1          [+] Site            : 1337db.com                            1
3          [+] Support e-mail  : submit[at]1337db.com                  3
3                                                                      3
7               ##########################################             7
1               I'm R4dc0re 1337 Member from 1337 DataBase             1
3               ##########################################             3
3                                                                      3                                            
7-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-7
# Author: R4dc0re
# Exploit Title: Rae Media INC Real Estate Single and Multi Agent System SQL injection Vulnerability
# Date: 05-12-2010
# Vendor or Software Link: http://www.aliensoftcorp.com/
# Category:WebApp
# Version:3.0
# Price:300$
# Contact: [email protected]
# Website: www.1337db.com
# Greetings to: R0073r(1337db.com), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db members 
 Submit Your Exploit at [email protected]
 ########################################################################################
[Product Detail]
 Developed it from the ground up, we are one of the original pioneers of this type of system 
and we have been copied many times over. 
Originally developed in 1999 and continuously upgraded to become one of most trusted, stable system available.
 Our real estate listing software has help hundreds of real estate agents, 
real estate offices, real estate listings portals and even private real estate sellers reach buyers 
and sellers and provide them with a professional looking and functioning listings database.
 The team at Rae Media can customize or develop a system to meet any requirements. 
Contact our sales team to discuss your requirements, toll free 1-877-700-6688
     [Vulnerability]
 SQL Injection:
 Single Agent:
http://www.realestatelakecountry.com/resulttype.asp?probe=[Code]
 Multi Agent:
http://www.realestatelakecountry.com/multi/city.asp?probe=[Code]
########################################################################################
1-4-2 (www01)