← Database

CVE-2009-4386

HIGH CVSS: 7.5 Published: 2009-12-22 Modified: 2026-06-16

Description

SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via the NoticiaID parameter and other unspecified vectors.

Affected Platforms

Bookingcentre Booking System For Hotels Group

Weakness Type

CWE-89

References