CVE-2014-4884

The CVE-2014-4884 entry concerns the Android application Conrad Hotel (com.wConradHotel) version 0.1, which does not verify X.509 certificates when establishing TLS connections. This improper certificate validation enables man-in-the-middle attackers to spoof SSL servers and capture sensitive inf...

CVE-2014-5831

The Hotel Story: Resort Simulation aka com.happylabs.hotelstory application 1.7.9B for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Hotel Story: Resort Simulation aka com.happylabs.hotelstory application 1.7.9B for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5831

CVE-2014-5831 concerns the Android app “The Hotel Story: Resort Simulation” (com.happylabs.hotelstory) version 1.7.9B. The vulnerability is that the app does not verify X.509 certificates from SSL servers, enabling man-in-the-middle attackers to spoof servers and exfiltrate sensitive information ...

CVE-2014-5831

The Hotel Story: Resort Simulation aka com.happylabs.hotelstory application 1.7.9B for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Hotel Booking Portal - SQL Injection

No description provided by source. 'Hotel Booking Portal' SQL Injection CVE-2012-1672 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in getcity.php that allows for SQL injection of the 'country' POST parameter. II. TESTED...

BSI Advance Hotel Booking System 1.0 - SQL Injection Vulnerability

No description provided by source. ----------------------------------------------------------------------- PHP BSI Advance Hotel Booking System v1.0 SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site :...

BSI Hotel Booking System Admin 1.4 & 2.0 - Login Bypass Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability ----------------------------------------------------------------------------------------- Author :...

Pre Hotel and Resorts 'user_login.asp' Multiple SQL Injection Vulnerabilies

No description provided by source. source: http://www.securityfocus.com/bid/27450/info Pre Hotel and Resorts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Joomla 1.5 Jreservation Component SQLi And XSS Vulnerability

No description provided by source. ============================================================ Joomla 1.5 Jreservation Component SQLi And XSS Vulnerability ============================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 ...

Hotel Booking Portal 0.1 - Multiple Vulnerabilities

No description provided by source. ----------------------------------------------------------- / | | | | | | | | | | | | | | | | | / |/ |/ \ | | || | || | | | | / | ||\,|,||| ----------------------------------------------------------- Hotel Booking Portal v0.1 Multiple Vulnerabilities Google...

Joomla Hotel Booking System - XSS/SQL Injection Multiple Vulnerabilities

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection...

SAS Hotel Management System user_login.asp SQL Injection Vulnerability

No description provided by source. 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ 0 0 \ \ /\ /\ \ \ \ /\ \ \ /\ /\ \ \ \ \ \ \ / 1 1 \ \ \ \\ \ \ /\ \...

PHPJabbers Hotel Booking System 3.0 - Multiple Vulnerabilities

No description provided by source. Hotel Booking System V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

Easy Travel Portal SQl Vulnerable

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Easy Travel Portal SQl Vulnerable Vendor url:http://www.softwebsnepal.com/ Version:2 Price:n/a Published: 2010-06-17 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all I...

Mole Group Hotel Script 1.0 - Remote SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ Mole Group Hotel Script 1.0 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz...

CBHotel Hotel Software and Booking system 1.8 - Multiple Vulnerabilities

No description provided by source. Exploit Title: Hotel Software and Booking system 1.8 - SQL Injection / Cross Site Scripting Date: 21 de Agosto del 2013 Exploit Author: Dylan Irzi Credit goes for: websecuritydev.com Vendor Homepage: http://www.cbhotel.eu/ Tested on: Win8 & Linux Mint Affected...

CVE-2014-4035

Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2014-4035

CVE-2014-4035 affects Best Soft Inc. (BSI) Advance Hotel Booking System 2.0. The vulnerability is a cross-site scripting (XSS) in booking_details.php where the attacker can inject arbitrary script via the title parameter. Public materials (exploits and writeups) indicate a persistent XSS variant ...