CVE-2010-0763

The CVE-2010-0763 issue is a SQL injection in CommodityRentals Vacation Rental Software, specifically in index.php’s CalendarView action via the rental_id parameter. Affected component/function: CalendarView (rental_id). Root cause: unsanitized input leading to arbitrary SQL execution. Impact per...

CVE-2010-0763: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rentalid parameter in a CalendarView action...

Mole Group Vacation Estate Listing Script SQL Injection

Vacation Estate Listing Blind Sql Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms Demo: http://vacation.mole-group.com/ Bug in \propertiesview.php Exploit: propertiesview.php?editid1=2 and substring@@version,1,1=4 propertiesview.php?editid1=2 and...

Mole Group Vacation Estate Listing Script (editid1) Blind SQL Injection

No description provided by source. Vacation Estate Listing Blind Sql Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms Demo: http://vacation.mole-group.com/ Bug in \propertiesview.php Exploit: propertiesview.php?editid1=2 and substring@@version,1,1=4...

Mole Group Vacation Estate Listing Script - Blind SQL Injection

Mole Group Vacation Estate Listing Script - Blind SQL Injection Vacation Estate Listing Blind Sql Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms Demo: http://vacation.mole-group.com/ Bug in \propertiesview.php Exploit: propertiesview.php?editid1=2 and...

Mole Group Vacation Estate Listing Script - Blind SQL Injection

Vacation Estate Listing Blind Sql Autore: x0r Email: [email protected] Site: http://w00tz0ne.altervista.org/index.php Cms Demo: http://vacation.mole-group.com/ Bug in \propertiesview.php Exploit: propertiesview.php?editid1=2 and substring@@version,1,1=4 propertiesview.php?editid1=2 and...

Mole Group Vacation Estate Listing Script (editid1) Blind SQL Injection

Exploit for unknown platform in category web applications ======================================================================= Mole Group Vacation Estate Listing Script editid1 Blind SQL Injection ======================================================================= Vacation Estate Listing...

vacationrental-sql.txt

┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

Sql injection

SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sections action...

CVE-2008-3603

SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sections action...

CVE-2008-3603

CVE-2008-3603 describes a SQL injection in Vacation Rental Script 3.0 (index.php) where the id parameter in a sections action enables remote attackers to execute arbitrary SQL commands. Root cause: unsafely concatenated user input in the query. Impact per the CVSS: partial confidentiality, integr...

CVE-2008-3603: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Vacation Rental Script 3.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sections action...

Vacation Rental Script 3.0 (id) Remote SQL Injection Vulnerability

No description provided by source. ┌┌─────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └─────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes a...

Vacation Rental Script 3.0 - id SQL Injection

Vacation Rental Script 3.0 - id SQL Injection ????????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ????? From...

Vacation Rental Script 3.0 (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Vacation Rental Script 3.0 id Remote SQL Injection Vulnerability ==================================================================...

Vacation Rental Script 3.0 - 'id' SQL Injection

????????????????????????????????????????????????????????????????????????????????????? ?? C r a C k E r ?? ?? T H E C R A C K O F E T E R N A L M I G H T ?? ???????????????????????????????????????????????????????????????????????????????????? ????? From The Ashes and Dust Rises An Unimaginable...

Unfixed XSS vulnerability at www.ultimatevacationdestinations.com

Security researcher mckt, has submitted on 06/10/2008 a cross-site-scripting XSS vulnerability affecting www.ultimatevacationdestinations.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/09/2009. ...

webTA by kronos - XSS

http://www.kronos.com/Products/webTA.htm webTA is used by thousands of fed. employees. I did a limited security review of a couple deployments. Because of certain contractual limitations I have been able to verify XSS in its Project Management module only, but I suspect it also exists in...

webta-xss.txt

http://www.kronos.com/Products/webTA.htm webTA is used by thousands of fed. employees. I did a limited security review of a couple deployments. Because of certain contractual limitations I have been able to verify XSS in its Project Management module only, but I suspect it also exists in...

PT-2006-6644

Name of the Vulnerable Software and Affected Versions DirectAdmin version 1.28.1 Description The issue allows remote authenticated users to inject arbitrary web script or HTML. This can be achieved through various parameters and commands, including the user parameter to CMD SHOW RESELLER or CMD...