CVE-2010-4814: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index1.php in Best Soft Inc. BSI Advance Hotel Booking System 1.0 allows remote attackers to execute arbitrary SQL commands via the page parameter...

CultBooking 2.0.4 (lang) Local File Inclusion Vulnerability

Summary Open source hotel booking system Internet Booking Engine IBE. Via a central api called CultSwitch it is possible to make bookings and set the actual availabilities in the hotels pms. This is easy to install and easy to integrate with full support. Description CultBooking suffers from a...

CultBooking 2.0.4 (cultbooking.php) Multiple XSS/PD Vulnerabilities

Summary Open source hotel booking system Internet Booking Engine IBE. Via a central api called CultSwitch it is possible to make bookings and set the actual availabilities in the hotels pms. This is easy to install and easy to integrate with full support. Description CultBooking Hotel Booking...

cultbooking 2.0.4 - Multiple Vulnerabilities

CultBooking 2.0.4 lang Local File Inclusion Vulnerability Vendor: Cultuzz Digital Media GmbH Product web page: http://www.cultuzz.com Affected version: 2.0.4 Summary: Open source hotel booking system Internet Booking Engine IBE. Via a central api called CultSwitch it is possible to make bookings...

BSI Advance Hotel Booking System v1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================================= BSI Advance Hotel Booking System v1.0 SQL Injection Vulnerability ================================================================= Author : v3n0m Site :...

BSI Advance Hotel Booking System 1.0 - SQL Injection

BSI Advance Hotel Booking System 1.0 - SQL Injection ----------------------------------------------------------------------- PHP BSI Advance Hotel Booking System v1.0 SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site :...

BSI Advance Hotel Booking System 1.0 - SQL Injection

----------------------------------------------------------------------- PHP BSI Advance Hotel Booking System v1.0 SQL Injection Vulnerability ----------------------------------------------------------------------- Author : v3n0m Site : http://yogyacarderlink.web.id/ Date : November, 14-2010...

BSI Hotel Booking System SQL Injection

----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : September, 22th 2010...

BSI Hotel Booking System Admin Login Bypass Vulnerability

Exploit for php platform in category web applications ========================================================= BSI Hotel Booking System Admin Login Bypass Vulnerability ========================================================= Author : K-159 Date : September, 22th 2010 Location : Jakarta,...

[ECHO_ADV_113$2010] BSI Hotel Booking System Admin Login Bypass Vulnerability

----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : September, 22th 2010...

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass

BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass ----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability...

Sql injection

SQL injection vulnerability in hoteltiempolibreext.php in Venalsur Booking Centre Booking System for Hotels Group, when magicquotesgpc is enabled, allows remote attackers to execute arbitrary SQL commands via the NoticiaID parameter and other unspecified vectors...

CVE-2009-4386

CVE-2009-4386 is a SQL injection vulnerability in the Venalsur Booking Centre Booking System for Hotels Group, specifically in hotel_tiempolibre_ext.php. When magic_quotes_gpc is enabled, remote attackers can manipulate the NoticiaID parameter and other vectors to execute arbitrary SQL commands. ...

CVE-2009-4386: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in hoteltiempolibreext.php in Venalsur Booking Centre Booking System for Hotels Group, when magicquotesgpc is enabled, allows remote attackers to execute arbitrary SQL commands via the NoticiaID parameter and other unspecified vectors...

Meeting Room Booking System SQL Injection Vulnerability

This host is installed with Meeting Room Booking System and is prone to SQL Injection vulnerability. OpenVAS Vulnerability Test $Id: gbmrbssqlinjvuln.nasl 4869 2016-12-29 11:01:45Z teissa $ Meeting Room Booking System SQL Injection Vulnerability Authors: Nikita MR Copyright: Copyright c 2009...

Meeting Room Booking System SQL Injection Vulnerability

Meeting Room Booking System is prone to a SQL Injection vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2009-3533

SQL injection vulnerability in report.php in Meeting Room Booking System MRBS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the typematch parameter. NOTE: some of these details are obtained from third party information...

CVE-2009-3533

CVE-2009-3533 : The Meeting Room Booking System (MRBS) is vulnerable in its reporting page, report.php, where the typematch parameter is not properly sanitized before being used in a SQL query. This allows remote attackers to inject arbitrary SQL and potentially read/modify data in the MRBS datab...

CVE-2009-3533: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in report.php in Meeting Room Booking System MRBS before 1.4.2 allows remote attackers to execute arbitrary SQL commands via the typematch parameter. NOTE: some of these details are obtained from third party information...

[ECHO_ADV_111$2009] Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability

/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV111$2009 ----------------------------------------------------------------------------------------- ECHOADV111$2009 Joomla Hotel Booking System Component XSS/SQL Injection Multiple Vulnerability...