Sql injection

2009-05-1812:00:00

PRIOn knowledge base

www.prio-n.com

9.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

39.9%

JSON

Multiple SQL injection vulnerabilities in admin/checklogin.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allow remote attackers to execute arbitrary SQL commands via the (1) myusername (username) and (2) password parameters. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
booking_system_for_hotels_groupeq2.01

CPE	Name	Operator	Version
	booking_system_for_hotels_group	eq	2.01

References

secunia.com/advisories/32430

exchange.xforce.ibmcloud.com/vulnerabilities/46914

www.exploit-db.com/exploits/7263