'Hotel Booking Portal' SQL Injection (CVE-2012-1672)

'Hotel Booking Portal' SQL Injection CVE-2012-1672 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in getcity.php that allows for SQL injection of the 'country' POST parameter. II. TESTED VERSION...

Hotel Booking Portal - SQL Injection

Hotel Booking Portal - SQL Injection 'Hotel Booking Portal' SQL Injection CVE-2012-1672 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in getcity.php that allows for SQL injection of the 'country' POST parameter. II. TESTED...

Hotel Booking Portal SQL Injection (CVE-2012-1672)

Exploit for php platform in category web applications 'Hotel Booking Portal' SQL Injection CVE-2012-1672 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in getcity.php that allows for SQL injection of the 'country' POST parameter. II...

Hotel Booking Portal 0.1 SQL Injection

'Hotel Booking Portal' SQL Injection CVE-2012-1672 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in getcity.php that allows for SQL injection of the 'country' POST parameter. II. TESTED VERSION...

Redbus.in Open Redirection

\ \ \ \ \ | / \ \ \ / /\ / /\ \ / / |/ /| | / / \ / / / | | /\ / \ / / /| | | / / // \ / || \ /\ // || || // // / / / ------------------------------------------------------------------------------------------------------------------------------------------------- TITLE: REDBUS.IN URL...

PHP Booking Calendar <= 10e XSS Vulnerability - Active Check

PHP Booking Calendar is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

PHP Booking Calendar 'page_info_message' Parameter Cross Site Scripting Vulnerability

PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

CVE-2011-5045

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

CVE-2011-5045

PHP Booking Calendar 10e is vulnerable to a cross-site scripting (XSS) flaw in details_view.php via the page_info_message parameter. The underlying issue is insufficient sanitization of user-supplied data, enabling arbitrary script execution in the victim’s browser. OpenVAS entries describe the v...

CVE-2011-5045

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

PHP Booking Calendar 10e - page_info_message Cross-Site Scripting

PHP Booking Calendar 10e - pageinfomessage Cross-Site Scripting source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

PHP Booking Calendar 10e Cross Site Scripting

Exploit Title: PHP Booking Calendar 10e XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/bookingcalendar/ Version: 10e Category: webapps php Vulnerability The pageinfomessage varibale in the detailsview.php does not sanitize input. This is a relective XSS attack...

PHP Booking Calendar 10e - 'page_info_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

SnowRES - Accommodation Booking System Cross Site Scripting

Exploit Title: SnowRES - Accommodation Booking System Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: advancedsearchresult.php Search Modules Exploit: "/ Demo:...

Joomla! Component com_rsappt_pro2 - Local File Inclusion

Joomla! Component comrsapptpro2 - Local File Inclusion Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / /...

Joomla Component com_rsappt_pro2 LFI Vulnerability

Exploit for php platform in category web applications Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / /...

Joomla Appointment Booking Pro Arbitrary File Reading

Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / / / / / / / / / / / / / /...

Joomla! Component com_rsappt_pro2 - Local File Inclusion

Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / / / / / / / / / / / / / /...

Sql injection

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...