obm-sql.txt

Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo : http://demo.onlinebookingmanager.com/guestside/ DorK : Online Booking Manager2....

Online Booking Manager 2.2 (id) SQL Injection Vulnerability

No description provided by source. Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo :...

Online Booking Manager 2.2 - 'id' SQL Injection

Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo : http://demo.onlinebookingmanager.com/guestside/ DorK : Online Booking Manager2....

Online Booking Manager 2.2 (id) SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Online Booking Manager 2.2 id SQL Injection Vulnerability =========================================================== Online Booking Manager2.2 id= SQL Injection Vulnerability...

Online Booking Manager 2.2 - id SQL Injection

Online Booking Manager 2.2 - id SQL Injection Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo :...

PHP Booking Calendar 10 d Remote SQL Injection Exploit

No description provided by source. Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Ja...

PHP Booking Calendar 10 d (fckeditor) Arbitrary File Upload Exploit

No description provided by source. ?php / -------------------------------------------------------------- PHP Booking Calendar 10 d fckeditor Arbitrary File Upload Exploit -------------------------------------------------------------- Special thnx for : Egix - vulnerable code in...

phpbook-upload.txt

0 && !inarray $sExtension, $arAllowed || count$arDenied 0 && inarray $sExtension, $arDenied 63. SendResults '202' ; 64. 65. $sErrorNumber = '0' ; 66. $sFileUrl = '' ; 67. 68. // Initializes the counter used to rename the file, if ano...

phpbook-sql.txt

Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All muslims...

phpBookingCalendar 10 d - SQL Injection

Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani & Jadi & iuoisn & Str0ke & All muslims...

PHP Booking Calendar 10 d Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ====================================================== PHP Booking Calendar 10 d Remote SQL Injection Exploit ====================================================== Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 exploit...

phpBookingCalendar 10 d - SQL Injection

phpBookingCalendar 10 d - SQL Injection Portal :PHP Booking Calendar 10 d sql/upload Exploit Modified 2008 Download : https://sourceforge.net/project/showfiles.php?groupid=132702 exploit aported password crypted Founded & Exploited by : Stack Contact: Ev!L = see down Greetz : Houssamix & Djekmani...

PHP Booking Calendar 10 d (fckeditor) Arbitrary File Upload Exploit

Exploit for unknown platform in category web applications =================================================================== PHP Booking Calendar 10 d fckeditor Arbitrary File Upload Exploit =================================================================== ?php /...

CVE-2008-0294

CVE-2008-0294 affects FreeSeat prior to 1.1.5d. A flaw in the seat-locking implementation could allow an attacker to book a seat more than once via unspecified vectors. The vulnerability originates in the seat-locking logic; the exact attack vector is not detailed in the provided sources. The cit...

CVE-2008-0294: Undefined Security Weakness

Unspecified vulnerability in the seat-locking implementation in FreeSeat before 1.1.5d allows attackers to book a seat more than once via unspecified vectors...

Airkiosk/formlib application is XSS vuln

In the last week I've found a XSS vuln into the Sutra's Airkiosk application for the realtime distribution of flights/booking and check-in interface www.airkiosk.com. The XSS is possible because they are using a VULN/OLD formlib.pl in their application that permits to execute any JavaScript you...

CVE-2006-3049

Multiple cross-site scripting XSS vulnerabilities in booking3.php in Mole Group Ticket Booking Script allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 address1, 3 address2, 4 county, 5 postcode, 6 email, 7 phone, or 8 mobile parameters to booking2.php...

CVE-2006-3049

The CVE-2006-3049 entry describes multiple cross-site scripting (XSS) flaws in Mole Group’s Ticket Booking Script, specifically in booking3.php, exploitable via the following parameters passed to booking2.php: name, address1, address2, county, postcode, email, phone, and mobile. Exploitation woul...

CVE-2006-3049: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in booking3.php in Mole Group Ticket Booking Script allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 address1, 3 address2, 4 county, 5 postcode, 6 email, 7 phone, or 8 mobile parameters to booking2.php...

mole.com.ua Ticket Booking Script - XSS

Ticket Booking Script Homepage: http://www.mole.com.ua Effected files: input boxes on booking2.php XSS Vulnerabilities: The input boxes on booking2.php do not sanatize userinput before geenrating it and then submitting it to a MySQL db. This can causes XSS examples as well as possible SQL...