CVE-2008-3266

EPSS 2.4%

SQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System (HRS) Multi allows remote attackers to execute arbitrary SQL commands via the key parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6105unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/31170 http://securityreason.com/securityalert/4028 https://exchange.xforce.ibmcloud.com/vulnerabilities/43947 https://www.exploit-db.com/exploits/6105 http://www.securityfocus.com/bid/30316 http://www.vupen.com/english/advisories/2008/2154/references