CVE-2018-17842

CVE-2018-17842 affects Scriptzee Hotel Booking Engine 1.0, with a SQL injection vulnerability exposed via the hotels h_room_type parameter. The vulnerability allows potentially unauthorized access to data and manipulation of the backend database. According to NVD, the CVSS scores are CVSSv3.1: 9....

Hotel Booking Engine 1.0 - h_room_type SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Hotel Booking Engine 1.0 - 'hroomtype' SQL Injection Exploit Author: Ihsan Sencan Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/products/details/35 Version: 1.0 Category: Webapps Tested on:...

Hotel Booking Engine 1.0 SQL Injection

Exploit Title: Hotel Booking Engine 1.0 - 'hroomtype' SQL Injection Dork: N/A Exploit Author: Ihsan Sencan Date: 2018-10-01 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/products/details/35 Version: 1.0 Category: Webapps Tested on: WiN7x64/KaLiLinuXx64 CVE: CVE-N/A PO...

Professional Service Booking Software 1.0 SQL Injection

Exploit Title: Professional Service Booking Software 1.0 - SQL Injection Dork: N/A Date: 09.09.2017 Vendor Homepage: http://scriptzee.com/ Software Link: http://scriptzee.com/best-softwares/professional-service-booking-engine Demo: http://professionalservice.scriptzee.com/ Version: 1.0 Category:...

HotelCMS with Booking Engine - SQL injection vulnerability

http://localhost/PATH/locale? locale=SQL the locale parameter there is sql injection Wherein the error injection as follows: payload: http://localhost/PATH/locale? locale=1' AND SELECT 3507 FROMSELECT COUNT,CONCATFLOORRAND02,md5233x FROM INFORMATIONSCHEMA. The PLUGINS GROUP BY xa-- Lilt Test...

HotelCMS with Booking Engine - SQL Injection

Exploit Title: HotelCMS with Booking Engine - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://codepaul.com/ Software Buy: https://codecanyon.net/item/hotelcms-with-booking-engine/12789671 Demo: http://codepaul.com/hotelcms/ Version: N/A Tested on: Win7 x64, Kali Linux x64...

HotelCMS with Booking Engine - SQL Injection

HotelCMS with Booking Engine - SQL Injection Exploit Title: HotelCMS with Booking Engine - SQL Injection Google Dork: N/A Date: 10.02.2017 Vendor Homepage: http://codepaul.com/ Software Buy: https://codecanyon.net/item/hotelcms-with-booking-engine/12789671 Demo: http://codepaul.com/hotelcms/...

CultBooking 2.0.4 Multiple Vulnerabilities

Exploit for php platform in category web applications CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central...

obe-sql.txt

Online Booking engine userid SQL Injection Vulnerability Author: d3b4g Home : www.mvtechies.com email: bl4ckendatgmaildotcom HomE script : http://bookingengine.galaxyweblinks.com/ Risk: High DorK : N/A ------------------------------------------------------------- Exploit:...