CVE-2009-4386

SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, when magic_quotes_gpc is enabled, allows…

published December 22, 2009

CVSS
—
EPSS
1%
Percentile
63.2
In the wild
Unconfirmed
What it is

SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via the NoticiaID parameter and other unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01024 · 63.2th percentile
Published
2009-12-22T23:00Z
EPSS history
Timeline
  • 22 DEC 23:00Z
    SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, when magic_quotes_gpc is enabled, allows…
    cvelistv5