CVE-2009-4386: Bookingcentre Booking System For Hotels Group

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in hotel_tiempolibre_ext.php in Venalsur Booking Centre Booking System for Hotels Group, when magic_quotes_gpc is enabled, allows remote attackers to execute arbitrary SQL commands via the NoticiaID parameter and other unspecified vectors.

Affected products

• Bookingcentre Booking System For Hotels Group: affected versions not specified

Published 2009-12-22. Last modified 2026-06-16.