high7.5Public exploit code
CVE-2010-4814
SQL injection vulnerability in index1.php in Best Soft Inc.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- BSI Advance Hotel Booking System 1.0 - SQL Injection2010-11-14 · webapps · php
Impact
SQL injection vulnerability in index1.php in Best Soft Inc. (BSI) Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bestsoftinc | Advance Hotel Booking System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.org/files/view/95829/phpbsiahbs-sql.txt
- http://www.exploit-db.com/exploits/15531
- http://www.securityfocus.com/bid/44854
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63268
- http://packetstormsecurity.org/files/view/95829/phpbsiahbs-sql.txt
- http://www.exploit-db.com/exploits/15531
- http://www.securityfocus.com/bid/44854
- https://exchange.xforce.ibmcloud.com/vulnerabilities/63268