ADICO CMS v1.1 - Blind SQL Injection Vulnerability

Document Title: =============== ADICO CMS v1.1 - Blind SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=582 Release Date: ============= 2012-05-28 Vulnerability Laboratory ID VL-ID: ==================================== 582 Comm...

Travelon Express CMS 6.2.2 XSS / Shell Upload / SQL Injection

Title: ====== Travelon Express CMS v6.2.2 - Multiple Web Vulnerabilities Date: ===== 2012-05-10 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=530 VL-ID: ===== 530 Common Vulnerability Scoring System: ==================================== 8.1 Introduction: =============...

CVE-2012-1672

SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL commands via the country parameter...

Sql injection

SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL commands via the country parameter...

CVE-2012-1672

The CVE-2012-1672 issue affects Hotel Booking Portal 0.1, specifically getcity.php where the country parameter is vulnerable to SQL injection. The vulnerability permits remote attackers to execute arbitrary SQL commands via the country POST parameter, with PoCs and public disclosures illustrating...

CVE-2012-1672

SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL commands via the country parameter...

PT-2012-3432

Name of the Vulnerable Software and Affected Versions Hotel Booking Portal version 0.1 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the country parameter in the getcity.php file. Recommendations For Hotel Booking Portal version 0.1, conside...

CVE-2012-1672: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in getcity.php in Hotel Booking Portal 0.1 allows remote attackers to execute arbitrary SQL commands via the country parameter...

'Hotel Booking Portal' SQL Injection (CVE-2012-1672)

'Hotel Booking Portal' SQL Injection CVE-2012-1672 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in getcity.php that allows for SQL injection of the 'country' POST parameter. II. TESTED VERSION...

Hotel Booking Portal SQL Injection (CVE-2012-1672)

Exploit for php platform in category web applications 'Hotel Booking Portal' SQL Injection CVE-2012-1672 Mark Stanislav - email protected I. DESCRIPTION --------------------------------------- A vulnerability exists in getcity.php that allows for SQL injection of the 'country' POST parameter. II...

Hotel Booking Portal - SQL Injection

Hotel Booking Portal - SQL Injection 'Hotel Booking Portal' SQL Injection CVE-2012-1672 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in getcity.php that allows for SQL injection of the 'country' POST parameter. II. TESTED...

Hotel Booking Portal 0.1 SQL Injection

'Hotel Booking Portal' SQL Injection CVE-2012-1672 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in getcity.php that allows for SQL injection of the 'country' POST parameter. II. TESTED VERSION...

Redbus.in Open Redirection

\ \ \ \ \ | / \ \ \ / /\ / /\ \ / / |/ /| | / / \ / / / | | /\ / \ / / /| | | / / // \ / || \ /\ // || || // // / / / ------------------------------------------------------------------------------------------------------------------------------------------------- TITLE: REDBUS.IN URL...

PHP Booking Calendar 'page_info_message' Parameter Cross Site Scripting Vulnerability

PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...

PHP Booking Calendar <= 10e XSS Vulnerability - Active Check

PHP Booking Calendar is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holder...

CVE-2011-5045

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

CVE-2011-5045

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...

CVE-2011-5045

PHP Booking Calendar 10e is vulnerable to a cross-site scripting (XSS) flaw in details_view.php via the page_info_message parameter. The underlying issue is insufficient sanitization of user-supplied data, enabling arbitrary script execution in the victim’s browser. OpenVAS entries describe the v...

CVE-2011-5045: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in detailsview.php in PHP Booking Calendar 10e allows remote attackers to inject arbitrary web script or HTML via the pageinfomessage parameter...