CVE-2009-3503

Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.11% chance of exploitation in the next 30 days, 65th percentile

Published

2009-09-30

Updated

2024-09-17

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/9841

Security advisories

• http://secunia.com/advisories/36833
• http://www.vupen.com/english/advisories/2009/2744

References

• CVE Record
• NVD entry