Sql injection

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5874

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5875

SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System aka HBS for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5865

SQL injection vulnerability in the comhbssearch component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the rtype parameter in a showhoteldetails action to index.php...

CVE-2008-5865

CVE-2008-5865 affects the com_hbssearch component (Hotel Booking Reservation System, aka HBS) version 1.0 in Joomla! 1.0.0. The vulnerability is an SQL injection via the r_type parameter in a showhoteldetails action to index.php, allowing remote attackers to execute arbitrary SQL commands. The pr...

booking-sqlxss.txt

--------------------------------------------------------- Portal Name: Booking System Vendor : www.bookingcentre.eu Vulnerable File : cadenapaquetesext.php,hotel.php Author : PouyaServer , [email protected] Vulnerability : SQL/XSS --------------------------------------------------------- SQL...

Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Booking Centre 2.01 Auth Bypass SQL Injection Vulnerability -------------------------------------------------------------- Author: MrDoug E-mail: mrdoug13atgmaildotcom -------------------------------------------------------------- Exploit:...

Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Booking Centre 2.01 Auth Bypass SQL Injection Vulnerability ============================================================= Booking Centre 2.01 Auth Bypass SQL Injection...

Booking Centre 2.01 (HotelID) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Booking Centre 2.01 - Authentication Bypass

Booking Centre 2.01 Auth Bypass SQL Injection Vulnerability -------------------------------------------------------------- Author: MrDoug E-mail: mrdoug13atgmaildotcom -------------------------------------------------------------- Exploit: http://demo.hotelsadmin.com/admin/index.php Username ==...

Booking Centre 2.01 (HotelID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Booking Centre 2.01 HotelID Remote SQL Injection Vulnerability ================================================================...

Booking Centre 2.01 - HotelID SQL Injection

Booking Centre 2.01 - HotelID SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date:...

Booking Centre 2.01 - 'HotelID' SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

CVE-2008-5194

SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager obm 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in checkavail.php in SoftVisions Software Online Booking Manager obm 2.2 allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2008-5194

The provided connected documents confirm a concrete vulnerability: SQL injection in SoftVisions Software Online Booking Manager (obm) 2.2, exploitable through the id parameter in checkavail.php. This allows remote attackers to execute arbitrary SQL commands. The issue is documented across CVE-200...

obe-sql.txt

Online Booking engine userid SQL Injection Vulnerability Author: d3b4g Home : www.mvtechies.com email: bl4ckendatgmaildotcom HomE script : http://bookingengine.galaxyweblinks.com/ Risk: High DorK : N/A ------------------------------------------------------------- Exploit:...

Venalsur on-line Booking Centre - Cross-Site Scripting SQL Injection

Venalsur on-line Booking Centre - Cross-Site Scripting SQL Injection Booking System for Hotels Group powered by Venalsur Bookingcenter XSS/SQL injetion vulnerability! ------------------------------------------------------------------------------------------------------...

Venalsur on-line Booking Centre (OfertaID) XSS/SQL Injection Vulns

Exploit for unknown platform in category web applications ================================================================== Venalsur on-line Booking Centre OfertaID XSS/SQL Injection Vulns ================================================================== Booking System for Hotels Group powered ...

Venalsur on-line Booking Centre - Cross-Site Scripting / SQL Injection

Booking System for Hotels Group powered by Venalsur Bookingcenter XSS/SQL injetion vulnerability! ------------------------------------------------------------------------------------------------------...