CVE-2008-3266
SoftAcid Hotel Reservation System Multi - SQL Injection via picture_pic_bv.asp key Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-3266. PoCs published by Mr.SQL.
AI-analyzed exploit summary This exploit is a Perl script that performs a blind SQL injection attack against the 'picture_pic_bv.asp' endpoint in HRS software. It brute-forces the MD5 hash of the admin password by checking character-by-character using a time-based or boolean-based SQLi technique.
Description
SQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System (HRS) Multi allows remote attackers to execute arbitrary SQL commands via the key parameter.
Exploits (1)
This exploit is a Perl script that performs a blind SQL injection attack against the 'picture_pic_bv.asp' endpoint in HRS software. It brute-forces the MD5 hash of the admin password by checking character-by-character using a time-based or boolean-based SQLi technique.