TI-2008-03128 CVE-2008-3266 · GHSA-pxgq-qc9r-qfj4SQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System…Priority LOW 37SQL injection vulnerability in picture_pic_bv.asp in SoftAcid Hotel Reservation System (HRS) Multi allows remote attackers to execute arbitrary SQL commands via the key parameter.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02353 · Published 2008-07-24 · No fix listed CWE-89