Unfixed XSS vulnerability at www.official-site-hotel.com

Security researcher ironzorg, has submitted on 24/04/2008 a cross-site-scripting XSS vulnerability affecting www.official-site-hotel.com, which at the time of submission ranked 6779396 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008...

CVE-2008-0774

Cross-site scripting XSS vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotelname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Cross site scripting

Cross-site scripting XSS vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotelname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-0774

CVE-2008-0774 describes a cross-site scripting (XSS) vulnerability in the search.cgi of the Loris Hotel Reservation System (version 3.01 and possibly earlier). The issue allows remote attackers to inject arbitrary script/HTML via the hotel_name parameter. The NVD entry lists network attack vector...

CVE-2008-0774

Cross-site scripting XSS vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotelname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-0774: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotelname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

prehotel-bypass.txt

Aria-Security Team http://aria-security.net -------------------------------------- Vendor :http://www.preproject.com Script/Portal: Pre Hotel and Resorts reservation You can bypass the login page with: ' or ' Shouts :theoutl4w...

Pre Hotel and Resorts - user_login.asp Multiple SQL Injection Vulnerabilities

Pre Hotel and Resorts - userlogin.asp Multiple SQL Injection Vulnerabilities source: https://www.securityfocus.com/bid/27450/info Pre Hotel and Resorts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Pre Hotel and Resorts - 'user_login.asp' Multiple SQL Injection Vulnerabilities

source: https://www.securityfocus.com/bid/27450/info Pre Hotel and Resorts is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application...

CVE-2008-0184

Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrary files via an encoded "/" "%2F" in the file parameter...

CVE-2008-0184

CVE-2008-0184 affects Sys-Hotel on Line System. Affects the index.php file where an absolute path traversal can occur via an encoded slash (%2F) in the file parameter, enabling remote reading of arbitrary files. The NVD entry lists a Network attack vector with Low complexity and no authentication...

CVE-2008-0184

Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrary files via an encoded "/" "%2F" in the file parameter...

CVE-2008-0184: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in index.php in Sys-Hotel on Line System allows remote attackers to read arbitrary files via an encoded "/" "%2F" in the file parameter...

Unfixed XSS vulnerability at www.francehotelreservation.com

Security researcher Uber0n, has submitted on 08/11/2007 a cross-site-scripting XSS vulnerability affecting www.francehotelreservation.com, which at the time of submission ranked 78670 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/11/2007. ...

sashotel-sql.txt

A R I A - S E CU R I T Y SAS Hotel Management System SQL Injection http://www.sellatsite.com/sellatsite/hotel.asp Explanation: http://path/admin/admin.asp Username: anything' OR 'x'='x password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...

[Full-disclosure] H4-CREW-000003 Advirosy: Superclick XSS via popup.php

H4-CREW-000003 Advirosy: Superclick XSS via popup.php Software: Superclick servers on the internet Discovered by: h4 Crew severety: moderates investigations by the H4-Crew Impacts. 1cookie theif 2 hijacking XSS proxy xssproxy.sourceforge.net Discussion ========= H4-CREW-000003 Superclick Cross-Si...

CVE-2024-37364

Ariane Allegro Scenario Player through 2024-03-05, when Ariane Duo kiosk mode is used, allows physically proximate attackers to obtain sensitive information such as hotel invoice content with PII, and potentially create unauthorized room keys, by entering a guest-search quote character and then...