mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 01:04:30 +00:00
752 B
752 B
CVE-2009-3503
Description
Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters.
POC
Reference
- http://packetstormsecurity.org/0909-exploits/bpholidaylettings-sql.txt
- http://packetstormsecurity.org/0909-exploits/bpholidaylettings-sql.txt
Github
No PoCs found on GitHub currently.