7754 matches found
CVE-2008-4620
SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...
Sql injection
SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...
CVE-2008-4620
SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...
CVE-2008-4620
SQL injection vulnerability in Meeting Room Booking System MRBS before 1.4 allows remote attackers to execute arbitrary SQL commands via the area parameter to 1 month.php, and possibly 2 day.php and 3 week.php...
mrbs-sql.txt
"MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever you want". Web CMS:...
Meeting Room Booking System (MRBS) < 1.4 - SQL Injection
"MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever you want". Web CMS:...
Meeting Room Booking System (MRBS) 1.4 - SQL Injection
Meeting Room Booking System MRBS 1.4 - SQL Injection "MRBS is a system for multi-site booking of meeting rooms. Rooms are grouped by building/area and shown in a side-by-side view. Although the goal was initially to book rooms, MRBS can also be used to book any resource computer, planes, whatever...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...
CVE-2008-3565
Multiple cross-site scripting XSS vulnerabilities in Meeting Room Booking System MRBS 1.2.6 allow remote attackers to inject arbitrary web script or HTML via the area parameter to 1 day.php, 2 week.php, 3 month.php, 4 search.php, 5 report.php, and 6 help.php. NOTE: the provenance of this...
Meeting Room Booking System (MRBS) 1.2.6 - 'help.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30531/info MRBS Meeting Room Booking Software is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an...
Online Booking Manager 'checkavail.php' SQL注入漏洞
BUGTRAQ ID: 30004 CNCAN ID：CNCAN-2008070101 Online Booking Manager是一款基于PHP的WEB应用程序。 Online Booking Manager不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'checkavail.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 SoftVisions Software Online Booking Manager 2.2 目前没有详细解决方案提供：...
obm-sql.txt
Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo : http://demo.onlinebookingmanager.com/guestside/ DorK : Online Booking Manager2....
Online Booking Manager 2.2 (id) SQL Injection Vulnerability
No description provided by source. Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo :...
Online Booking Manager 2.2 (id) SQL Injection Vulnerability
Exploit for unknown platform in category web applications =========================================================== Online Booking Manager 2.2 id SQL Injection Vulnerability =========================================================== Online Booking Manager2.2 id= SQL Injection Vulnerability...
Online Booking Manager 2.2 - id SQL Injection
Online Booking Manager 2.2 - id SQL Injection Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo :...
Online Booking Manager 2.2 - 'id' SQL Injection
Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo : http://demo.onlinebookingmanager.com/guestside/ DorK : Online Booking Manager2....
PHP Booking Calendar 10 d (fckeditor) Arbitrary File Upload Exploit
No description provided by source. ?php / -------------------------------------------------------------- PHP Booking Calendar 10 d fckeditor Arbitrary File Upload Exploit -------------------------------------------------------------- Special thnx for : Egix - vulnerable code in...
PHP Booking Calendar 10 d Remote SQL Injection Exploit
No description provided by source. Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Ja...
phpbook-sql.txt
Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All muslims...
phpbook-upload.txt
0 && !inarray $sExtension, $arAllowed || count$arDenied 0 && inarray $sExtension, $arDenied 63. SendResults '202' ; 64. 65. $sErrorNumber = '0' ; 66. $sFileUrl = '' ; 67. 68. // Initializes the counter used to rename the file, if ano...