Description
Multiple SQL injection vulnerabilities in search.aspx in BPowerHouse BPHolidayLettings 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) rid and (2) tid parameters.
Exploits (1)
References (3)
Core 3
Core References
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/2744
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/36833
Exploit x_refsource_misc
http://packetstormsecurity.org/0909-exploits/bpholidaylettings-sql.txt
Scores
EPSS
0.0034
EPSS Percentile
56.6%
Details
CWE
CWE-89
Status
published
Products (1)
bpowerhouse/bpholidaylettings
1.0
Published
Sep 30, 2009
Tracked Since
Feb 18, 2026