Cross site scripting

Cross-site scripting XSS vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotelname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2008-0774

CVE-2008-0774 describes a cross-site scripting (XSS) vulnerability in the search.cgi of the Loris Hotel Reservation System (version 3.01 and possibly earlier). The issue allows remote attackers to inject arbitrary script/HTML via the hotel_name parameter. The NVD entry lists network attack vector...

CVE-2008-0774

Cross-site scripting XSS vulnerability in search.cgi in Loris Hotel Reservation System 3.01 and possibly earlier allows remote attackers to inject arbitrary web script or HTML via the hotelname parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-4575. Reason: This candidate is a reservation duplicate of CVE-2007-4575. Notes: All CVE users should reference CVE-2007-4575 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2007-6011

Unspecified vulnerability in main.php of BugHotel Reservation System before 4.9.9 P3 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-6011

The CVE-2007-6011 entry concerns BugHotel Reservation System (main.php) before version 4.9.9 P3, where an authentication bypass allows remote attackers to gain administrative access via unspecified vectors. The description notes the vulnerability details are unspecified and provenance is from thi...

CVE-2007-6011

Unspecified vulnerability in main.php of BugHotel Reservation System before 4.9.9 P3 allows remote attackers to bypass authentication and gain administrative access via unspecified vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

LoCal Calendar 1.1 - 'lcUser.php' Remote File Inclusion

+------------------------------------------------------------------------------------------- local Calendar System v1.1 lcUser.php Remote File Include --------------------------------------------------------------------------------------------- An advanced instrumentation reservation system for...

LoCal Calendar 1.1 (lcUser.php) Remote File Include Vulnerability

Exploit for unknown platform in category web applications ================================================================= LoCal Calendar 1.1 lcUser.php Remote File Include Vulnerability =================================================================...

LoCal Calendar 1.1 (lcUser.php) Remote File Include Vulnerability

No description provided by source. +------------------------------------------------------------------------------------------- local Calendar System v1.1 lcUser.php Remote File Include --------------------------------------------------------------------------------------------- An advanced...