CVE-2008-6215

Cross-site scripting XSS vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter...

CVE-2008-6216

SQL injection vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter...

Sql injection

SQL injection vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter...

CVE-2008-6216

The CVE-2008-6216 entry describes a SQL injection vulnerability in the Venalsur Booking Centre Booking System for Hotels Group, specifically in the file cadena_ofertas_ext.php. The issue can be exploited remotely by supplying a crafted value to the OfertaID parameter, allowing execution of arbitr...

CVE-2008-6215

CVE-2008-6215 is an XSS vulnerability in the PHP file cadena_ofertas_ext.php of the Venalsur Booking Centre Booking System for Hotels Group. The issue allows remote attackers to inject arbitrary web script or HTML through the OfertaID parameter. The NVD entry lists a CVSS v2 base score of 4.3 (ME...

CVE-2008-6215

Cross-site scripting XSS vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter...

CVE-2008-6216

SQL injection vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter...

Meeting Room Booking System (MRBS) month.php area Parameter SQL Injection

The remote host is running Meeting Room Booking System MRBS, a PHP application for booking meeting rooms or other resources. The version of MRBS installed on the remote host fails to sanitize user-supplied input to the 'area' parameter of the 'month.php' script before using it to construct databa...

CVE-2008-5875

SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System aka HBS for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5874

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5875

SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System aka HBS for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5865

SQL injection vulnerability in the comhbssearch component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the rtype parameter in a showhoteldetails action to index.php...

CVE-2008-5865

CVE-2008-5865 affects the com_hbssearch component (Hotel Booking Reservation System, aka HBS) version 1.0 in Joomla! 1.0.0. The vulnerability is an SQL injection via the r_type parameter in a showhoteldetails action to index.php, allowing remote attackers to execute arbitrary SQL commands. The pr...

booking-sqlxss.txt

--------------------------------------------------------- Portal Name: Booking System Vendor : www.bookingcentre.eu Vulnerable File : cadenapaquetesext.php,hotel.php Author : PouyaServer , [email protected] Vulnerability : SQL/XSS --------------------------------------------------------- SQL...

Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Booking Centre 2.01 Auth Bypass SQL Injection Vulnerability -------------------------------------------------------------- Author: MrDoug E-mail: mrdoug13atgmaildotcom -------------------------------------------------------------- Exploit:...

Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Booking Centre 2.01 Auth Bypass SQL Injection Vulnerability ============================================================= Booking Centre 2.01 Auth Bypass SQL Injection...

Booking Centre 2.01 (HotelID) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Booking Centre 2.01 - Authentication Bypass

Booking Centre 2.01 Auth Bypass SQL Injection Vulnerability -------------------------------------------------------------- Author: MrDoug E-mail: mrdoug13atgmaildotcom -------------------------------------------------------------- Exploit: http://demo.hotelsadmin.com/admin/index.php Username ==...