Booking Centre 2.01 - 'HotelID' SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Sql injection

SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager obm 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5194

SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager obm 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5194

The provided connected documents confirm a concrete vulnerability: SQL injection in SoftVisions Software Online Booking Manager (obm) 2.2, exploitable through the id parameter in checkavail.php. This allows remote attackers to execute arbitrary SQL commands. The issue is documented across CVE-200...

obe-sql.txt

Online Booking engine userid SQL Injection Vulnerability Author: d3b4g Home : www.mvtechies.com email: bl4ckendatgmaildotcom HomE script : http://bookingengine.galaxyweblinks.com/ Risk: High DorK : N/A ------------------------------------------------------------- Exploit:...

Venalsur on-line Booking Centre - Cross-Site Scripting SQL Injection

Venalsur on-line Booking Centre - Cross-Site Scripting SQL Injection Booking System for Hotels Group powered by Venalsur Bookingcenter XSS/SQL injetion vulnerability! ------------------------------------------------------------------------------------------------------...

Venalsur on-line Booking Centre (OfertaID) XSS/SQL Injection Vulns

Exploit for unknown platform in category web applications ================================================================== Venalsur on-line Booking Centre OfertaID XSS/SQL Injection Vulns ================================================================== Booking System for Hotels Group powered ...

Venalsur on-line Booking Centre - Cross-Site Scripting / SQL Injection

Booking System for Hotels Group powered by Venalsur Bookingcenter XSS/SQL injetion vulnerability! ------------------------------------------------------------------------------------------------------...

CVE-2008-4620

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

Sql injection

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

CVE-2008-4620

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

CVE-2008-4620

SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...

mrbs-sql.txt

"MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever you want". Web CMS:...

Meeting Room Booking System (MRBS) 1.4 - SQL Injection

Meeting Room Booking System MRBS 1.4 - SQL Injection "MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever...

Meeting Room Booking System (MRBS) < 1.4 - SQL Injection

"MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever you want". Web CMS:...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...

CVE-2008-3565

Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...

Meeting Room Booking System (MRBS) 1.2.6 - 'help.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/30531/info MRBS Meeting Room Booking Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...

Online Booking Manager 'checkavail.php' SQL注入漏洞

BUGTRAQ ID: 30004 CNCAN ID：CNCAN-2008070101 Online Booking Manager是一款基于PHP的WEB应用程序。 Online Booking Manager不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'checkavail.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 SoftVisions Software Online Booking Manager 2.2 目前没有详细解决方案提供：...

Online Booking Manager 2.2 (id) SQL Injection Vulnerability

No description provided by source. Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo :...