CVE-2011-5045

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

CVE-2011-5045

PHP Booking Calendar 10e is vulnerable to a cross-site scripting (XSS) flaw in details_view.php via the page_info_message parameter. The underlying issue is insufficient sanitization of user-supplied data, enabling arbitrary script execution in the victim’s browser. OpenVAS entries describe the v...

CVE-2011-5045

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

CVE-2011-5045: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

PHP Booking Calendar 10e - page_info_message Cross-Site Scripting

PHP Booking Calendar 10e - pageinfomessage Cross-Site Scripting source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

PHP Booking Calendar 10e - 'page_info_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

PHP Booking Calendar 10e Cross Site Scripting

Exploit Title: PHP Booking Calendar 10e XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/bookingcalendar/ Version: 10e Category: webapps php Vulnerability The pageinfomessage varibale in the detailsview.php does not sanitize input. This is a relective XSS attack...

SnowRES - Accommodation Booking System Cross Site Scripting

Exploit Title: SnowRES - Accommodation Booking System Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: advancedsearchresult.php Search Modules Exploit: "/ Demo:...

Joomla! Component com_rsappt_pro2 - Local File Inclusion

Joomla! Component comrsapptpro2 - Local File Inclusion Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / /...

Joomla Component com_rsappt_pro2 LFI Vulnerability

Exploit for php platform in category web applications Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / /...

Joomla! Component com_rsappt_pro2 - Local File Inclusion

Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / / / / / / / / / / / / / /...

Joomla Appointment Booking Pro Arbitrary File Reading

Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / / / / / / / / / / / / / /...

CVE-2010-4814

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

Sql injection

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4814

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4814

CVE-2010-4814 describes a SQL injection vulnerability in the index1.php page of Best Soft Inc. (BSI) Advance Hotel Booking System 1.0. The underlying issue is improper handling of the page parameter, allowing remote attackers to inject arbitrary SQL commands. The vulnerability enables potential d...

CVE-2010-4814: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CultBooking 2.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central...

cultbooking 2.0.4 - Multiple Vulnerabilities

CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central api called CultSwitch it is possible to make bookings...