7754 matches found
phpBookingCalendar 10 d - SQL Injection
Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All muslims...
PHP Booking Calendar 10 d (fckeditor) Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications =================================================================== PHP Booking Calendar 10 d fckeditor Arbitrary File Upload Exploit =================================================================== ?php /...
PHP Booking Calendar 10 d Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ====================================================== PHP Booking Calendar 10 d Remote SQL Injection Exploit ====================================================== Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 exploit...
phpBookingCalendar 10 d - SQL Injection
phpBookingCalendar 10 d - SQL Injection Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani...
CVE-2008-0294
CVE-2008-0294 affects FreeSeat prior to 1.1.5d. A flaw in the seat-locking implementation could allow an attacker to book a seat more than once via unspecified vectors. The vulnerability originates in the seat-locking logic; the exact attack vector is not detailed in the provided sources. The cit...
Airkiosk/formlib application is XSS vuln
In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...
CVE-2006-3049
Multiple cross-site scripting XSS vulnerabilities in booking3.php in Mole Group Ticket Booking Script allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 address1, 3 address2, 4 county, 5 postcode, 6 email, 7 phone, or 8 mobile parameters to booking2.php...
CVE-2006-3049
The CVE-2006-3049 entry describes multiple cross-site scripting (XSS) flaws in Mole Group’s Ticket Booking Script, specifically in booking3.php, exploitable via the following parameters passed to booking2.php: name, address1, address2, county, postcode, email, phone, and mobile. Exploitation woul...
mole.com.ua Booking Script
Booking Script. Homepage: http://www.mole.com.ua PError with full path disclosure and possible buffer overflow?: http://www.example.com/week.php?year=2006&month=06&day=0' Warning: checkdate expects parameter 2 to be long, string given in...
mole.com.ua Ticket Booking Script - XSS
Ticket Booking Script Homepage: http://www.mole.com.ua Effected files: input boxes on booking2.php XSS Vulnerabilities: The input boxes on booking2.php do not sanatize userinput before geenrating it and then submitting it to a MySQL db. This can causes XSS examples as well as possible SQL...
CVE-2006-1422
SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...
Sql injection
SQL injection vulnerability in detailsview.php in PHP Booking Calendar 1.0c and earlier allows remote attackers to execute arbitrary SQL commands via the eventid parameter...
CVE-2006-1422
CVE-2006-1422 affects PHP Booking Calendar 1.0c and earlier. The vulnerability is an SQL injection in details_view.php via the event_id parameter, enabling remote attackers to execute arbitrary SQL commands. The NVD entry assigns a CVSS v2 base score of 5.0 (Medium) with network access, low attac...
