CVE-2008-6216

SQL injection vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter...

CVE-2008-6215

Cross-site scripting XSS vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter...

CVE-2008-6216

The CVE-2008-6216 entry describes a SQL injection vulnerability in the Venalsur Booking Centre Booking System for Hotels Group, specifically in the file cadena_ofertas_ext.php. The issue can be exploited remotely by supplying a crafted value to the OfertaID parameter, allowing execution of arbitr...

CVE-2008-6216: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter...

CVE-2008-6215: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter...

Meeting Room Booking System (MRBS) month.php area Parameter SQL Injection

The remote host is running Meeting Room Booking System MRBS, a PHP application for booking meeting rooms or other resources. The version of MRBS installed on the remote host fails to sanitize user-supplied input to the 'area' parameter of the 'month.php' script before using it to construct databa...

CVE-2008-5875

SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System aka HBS for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5875

SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System aka HBS for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5874

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5874: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5875: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System aka HBS for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5865

SQL injection vulnerability in the comhbssearch component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the rtype parameter in a showhoteldetails action to index.php...

CVE-2008-5865

CVE-2008-5865 affects the com_hbssearch component (Hotel Booking Reservation System, aka HBS) version 1.0 in Joomla! 1.0.0. The vulnerability is an SQL injection via the r_type parameter in a showhoteldetails action to index.php, allowing remote attackers to execute arbitrary SQL commands. The pr...

CVE-2008-5864: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Top Hotel comtophotelmodule component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5865: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comhbssearch component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the rtype parameter in a showhoteldetails action to index.php...

booking-sqlxss.txt

--------------------------------------------------------- Portal Name: Booking System Vendor : www.bookingcentre.eu Vulnerable File : cadenapaquetesext.php,hotel.php Author : PouyaServer , [email protected] Vulnerability : SQL/XSS --------------------------------------------------------- SQL...

Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability

No description provided by source. Booking Centre 2.01 Auth Bypass SQL Injection Vulnerability -------------------------------------------------------------- Author: MrDoug E-mail: mrdoug13atgmaildotcom -------------------------------------------------------------- Exploit:...

Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Booking Centre 2.01 Auth Bypass SQL Injection Vulnerability ============================================================= Booking Centre 2.01 Auth Bypass SQL Injection...

Booking Centre 2.01 (HotelID) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...