Joomla JMultipleHotelReservation 6.0.5 SQL Injection

2018-01-05T00:00:00
ID PACKETSTORM:145683
Type packetstorm
Reporter Bilal Kardadou
Modified 2018-01-05T00:00:00

Description

                                        
                                            `################################################  
#Title: Joomla JMultipleHotelReservation 6.0.5 - SQL injection  
#Credit: Bilal KARDADOU  
#Vendor: http://www.cmsjunkie.com/joomla-hotel-portal  
#URL:  
https://extensions.joomla.org/extensions/extension/vertical-markets/booking-a-reservations/jmultiplehotelreservation/  
#Product: 'Joomla JMultipleHotelReservation 6.0.5'  
#Developer: CMSJunkie  
#Extension type: Plugin  
#Last updated: Oct 30 2017  
#Compatibility: 3.X  
#Type: Paid download  
#Google Dork: inurl:"Google is your Friend"  
################################################  
#  
# Description:  
# With over nine years of experience in the lodging industry, we offer an  
easy to use, professional multiple hotel  
# reservation software. Joomla Multiple Hotel Reservation is offering  
management and reservation solutions for  
# all types of hotels, motels, B&B, resorts, apartments etc.  
#  
#  
# --Method=GET -p [term]  
#  
# -u "  
http://127.0.0.1/j-myhotel/component/j-hotelportal/?task=hotels.getSuggestionsList&term=a/b'/[SQLI]  
"  
#  
#  
# Bilal KARDADOU - https://www.linkedin.com/in/kardadou/)  
################################################  
`