Sql injection

SQL injection vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter...

CVE-2008-6215

CVE-2008-6215 is an XSS vulnerability in the PHP file cadena_ofertas_ext.php of the Venalsur Booking Centre Booking System for Hotels Group. The issue allows remote attackers to inject arbitrary web script or HTML through the OfertaID parameter. The NVD entry lists a CVSS v2 base score of 4.3 (ME...

CVE-2008-6216

The CVE-2008-6216 entry describes a SQL injection vulnerability in the Venalsur Booking Centre Booking System for Hotels Group, specifically in the file cadena_ofertas_ext.php. The issue can be exploited remotely by supplying a crafted value to the OfertaID parameter, allowing execution of arbitr...

CVE-2008-6215

Cross-site scripting XSS vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter...

CVE-2008-6216

SQL injection vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter...

CVE-2008-6215: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter...

CVE-2008-6216: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in cadenaofertasext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to execute arbitrary SQL commands via the OfertaID parameter...

4Site CMS <= 2.6 Multiple Remote SQL Injection Vulnerabilities

No description provided by source. WSEC-09-002 4Site CMS = 2.6 Multiple Remote SQL Injections Developer site: http://www.4site.ru/ Discovered by D.Mortalov // wsec.ru 1. Auth Bypass Login: 1'or'1 Password: 1'or’1 2. Multiple Remote SQL Injections in 4site CMS modules "Pages" module:...

Joomla Low Cost Hotels Component SQL Injection Exploit

!/usr/bin/perl Joomla comlowcosthotels Sql injection Author : Lovebug www.rbt-4.net ModuleName: comlowcosthotels ScriptName: Joomla use LWP::UserAgent; print "\n Target : http://wwww.site.com/path/ : "; chompmy $target=; $cn="concatusername,0x3a,password"; $tablename="josusers"; $br =...

Joomla All Hotels Component Blind SQL Injection

Joomla Component comallhotels id Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.joomlahbs.com/ & http://www.leveltensolutions.net/spa/ DorK : inurl:index.php?option=comallhotels Demo :...

Joomla Low Cost Hotels Component Blind SQL Injection

Joomla Component comlowcosthotels id Blind SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.com & www.TrYaG.cc script : http://www.joomlahbs.com/ DorK : inurl:index.php?option=comlowcosthotels Demo :...

Unfixed XSS vulnerability at www.moevenpick-hotels.com

Security researcher kInGoFcHaOs, has submitted on 12/07/2008 a cross-site-scripting XSS vulnerability affecting www.moevenpick-hotels.com, which at the time of submission ranked 105465 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/07/2008...

bookingcentre-sql.txt

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Booking Centre 2.01 (HotelID) Remote SQL Injection Vulnerability

No description provided by source. ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz...

Booking Centre 2.01 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Booking Centre 2.01 Auth Bypass SQL Injection Vulnerability ============================================================= Booking Centre 2.01 Auth Bypass SQL Injection...

Booking Centre 2.01 - HotelID SQL Injection

Booking Centre 2.01 - HotelID SQL Injection ----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date:...

Booking Centre 2.01 (HotelID) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Booking Centre 2.01 HotelID Remote SQL Injection Vulnerability ================================================================...

Booking Centre 2.01 - 'HotelID' SQL Injection

----------------------------بسم الله الرحمن الرحيم------------------------------ Tybe: hotelhabitaciones.php HotelID Remote SQL Injection Vulnerability Vendor: www.bookingcentre.eu Software: Hotels Group author: я3d D3v!L Date: 28.11.2008 Home: www.ahacker.biz contact: N/A...

Venalsur on-line Booking Centre (OfertaID) XSS/SQL Injection Vulns

No description provided by source. Booking System for Hotels Group powered by Venalsur Bookingcenter XSS/SQL injetion vulnerability! ------------------------------------------------------------------------------------------------------...