PT-2011-5192

Name of the Vulnerable Software and Affected Versions PHP Booking Calendar version 10e Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the page info message parameter in the details view.php file. Recommendations For PHP...

PHP Booking Calendar 10e - page_info_message Cross-Site Scripting

PHP Booking Calendar 10e - pageinfomessage Cross-Site Scripting source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute...

PHP Booking Calendar 10e Cross Site Scripting

Exploit Title: PHP Booking Calendar 10e XSS Date: 12/16/11 Author: G13 Software Link: http://sourceforge.net/projects/bookingcalendar/ Version: 10e Category: webapps php Vulnerability The pageinfomessage varibale in the detailsview.php does not sanitize input. This is a relective XSS attack...

PHP Booking Calendar 10e - 'page_info_message' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51119/info PHP Booking Calendar is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

SnowRES - Accommodation Booking System Cross Site Scripting

Exploit Title: SnowRES - Accommodation Booking System Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: advancedsearchresult.php Search Modules Exploit: "/ Demo:...

Joomla Appointment Booking Pro Arbitrary File Reading

Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / / / / / / / / / / / / / /...

Joomla! Component com_rsappt_pro2 - Local File Inclusion

Joomla! Component comrsapptpro2 - Local File Inclusion Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / /...

Joomla Component com_rsappt_pro2 LFI Vulnerability

Exploit for php platform in category web applications Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / /...

Joomla! Component com_rsappt_pro2 - Local File Inclusion

Appointment Booking Pro is a native Joomla component ================================= Last login: Tue Jun 7 2010 10:20:22 on ttys000 / / / / / / / / / / / / / : / / / / / / / / / / / / / / / | / / / / / / / / / / / / / // / // / / / / --X-- / / / / / / / / / / / / / / / / / / / /...

Sql injection

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4814

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4814

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CVE-2010-4814

CVE-2010-4814 describes a SQL injection vulnerability in the index1.php page of Best Soft Inc. (BSI) Advance Hotel Booking System 1.0. The underlying issue is improper handling of the page parameter, allowing remote attackers to inject arbitrary SQL commands. The vulnerability enables potential d...

CVE-2010-4814: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

PT-2011-1760

Name of the Vulnerable Software and Affected Versions Best Soft Inc. BSI Advance Hotel Booking System version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the page parameter in the "index1.php" file. Recommendations For Best Soft Inc. B...

CultBooking 2.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central...

CultBooking 2.0.4 (lang) Local File Inclusion Vulnerability

Summary Open source hotel booking system Internet Booking Engine IBE. Via a central api called CultSwitch it is possible to make bookings and set the actual availabilities in the hotels pms. This is easy to install and easy to integrate with full support. Description CultBooking suffers from a...

CultBooking 2.0.4 (cultbooking.php) Multiple XSS/PD Vulnerabilities

Summary Open source hotel booking system Internet Booking Engine IBE. Via a central api called CultSwitch it is possible to make bookings and set the actual availabilities in the hotels pms. This is easy to install and easy to integrate with full support. Description CultBooking Hotel Booking...

cultbooking 2.0.4 - Multiple Vulnerabilities

CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central api called CultSwitch it is possible to make bookings...

Zhumadian-day U.S.-China food network v3. 0 Business Edition XSS add management-vulnerability warning-the black bar safety net

Version:Zhumadian days of the U.S. Food network v3. 0 Business Edition Keywords:inurl:wenhuadisplay. asp XSS Code: iframe src=http:// 空间 的 域名 /xss.html Html Code: form name="admin" action="http:// 这里 目标 站 域名 /admin/adminaddsave.asp" method="POST" onSubmit="return validatethis" input type="text"...