CVE-2008-6216

EPSS 1.4%

SQL injection vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6876unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/49446 http://secunia.com/advisories/32430 https://exchange.xforce.ibmcloud.com/vulnerabilities/46226 https://www.exploit-db.com/exploits/6876 http://www.securityfocus.com/bid/31990 http://www.vupen.com/english/advisories/2008/2963