BSI Hotel Booking System SQL Injection

----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : September, 22th 2010...

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass ----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability...

Sql injection

SQL injection vulnerability in hoteltiempolibreext.php in Venalsur Booking Centre Booking System for Hotels Group, when magicquotesgpc is enabled, allows remote attackers to execute arbitrary SQL commands via the NoticiaID parameter and other unspecified vectors...

CVE-2009-4386

CVE-2009-4386 is a SQL injection vulnerability in the Venalsur Booking Centre Booking System for Hotels Group, specifically in hotel_tiempolibre_ext.php. When magic_quotes_gpc is enabled, remote attackers can manipulate the NoticiaID parameter and other vectors to execute arbitrary SQL commands. ...

Meeting Room Booking System SQL Injection Vulnerability

Meeting Room Booking System is prone to a SQL Injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Meeting Room Booking System SQL Injection Vulnerability

This host is installed with Meeting Room Booking System and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmrbssqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Meeting Room Booking System SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...

CVE-2009-3533

SQL injection vulnerability in report.php in Meeting Room Booking System MRBS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the typematch parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-3533

CVE-2009-3533 : The Meeting Room Booking System (MRBS) is vulnerable in its reporting page, report.php, where the typematch parameter is not properly sanitized before being used in a SQL query. This allows remote attackers to inject arbitrary SQL and potentially read/modify data in the MRBS datab...

[ECHO_ADV_111$2009] Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability...

Joomla Hotel Booking System XSS / SQL Injection

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability...

CVE-2008-6809

SQL injection vulnerability in hotelhabitaciones.php in Venalsur Booking Centre Booking System for Hotels Group 2.01 allows remote attackers to execute arbitrary SQL commands via the HotelID parameter...

CVE-2008-6215

CVE-2008-6215 is an XSS vulnerability in the PHP file cadena_ofertas_ext.php of the Venalsur Booking Centre Booking System for Hotels Group. The issue allows remote attackers to inject arbitrary web script or HTML through the OfertaID parameter. The NVD entry lists a CVSS v2 base score of 4.3 (ME...

Meeting Room Booking System (MRBS) month.php area Parameter SQL Injection

The remote host is running Meeting Room Booking System MRBS, a PHP application for booking meeting rooms or other resources. The version of MRBS installed on the remote host fails to sanitize user-supplied input to the 'area' parameter of the 'month.php' script before using it to construct databa...

booking-sqlxss.txt

--------------------------------------------------------- Portal Name: Booking System Vendor : www.bookingcentre.eu Vulnerable File : cadenapaquetesext.php,hotel.php Author : PouyaServer , [email protected] Vulnerability : SQL/XSS --------------------------------------------------------- SQL...

Venalsur on-line Booking Centre - Cross-Site Scripting SQL Injection

Venalsur on-line Booking Centre - Cross-Site Scripting SQL Injection Booking System for Hotels Group powered by Venalsur Bookingcenter XSS/SQL injetion vulnerability! ------------------------------------------------------------------------------------------------------...

Venalsur on-line Booking Centre (OfertaID) XSS/SQL Injection Vulns

Exploit for unknown platform in category web applications ================================================================== Venalsur on-line Booking Centre OfertaID XSS/SQL Injection Vulns ================================================================== Booking System for Hotels Group powered ...

CVE-2008-4620

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

CVE-2008-4620

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

Meeting Room Booking System (MRBS) 1.4 - SQL Injection

Meeting Room Booking System MRBS 1.4 - SQL Injection "MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...