cve/2009/CVE-2009-3503.md

CVE-2009-3503

Description

Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters.

POC

Reference

• http://packetstormsecurity.org/0909-exploits/bpholidaylettings-sql.txt

Github

No PoCs found on GitHub currently.