CVE-2008-5194

The provided connected documents confirm a concrete vulnerability: SQL injection in SoftVisions Software Online Booking Manager (obm) 2.2, exploitable through the id parameter in checkavail.php. This allows remote attackers to execute arbitrary SQL commands. The issue is documented across CVE-200...

Online Booking Manager 'checkavail.php' SQL注入漏洞

BUGTRAQ ID: 30004 CNCAN ID：CNCAN-2008070101 Online Booking Manager是一款基于PHP的WEB应用程序。 Online Booking Manager不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题是'checkavail.php'脚本对用户提交给'id'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 SoftVisions Software Online Booking Manager 2.2 目前没有详细解决方案提供：...

Online Booking Manager 2.2 (id) SQL Injection Vulnerability

No description provided by source. Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo :...

Online Booking Manager 2.2 - id SQL Injection

Online Booking Manager 2.2 - id SQL Injection Online Booking Manager2.2 id= SQL Injection Vulnerability Author: Hussin X Home : www.tryag.cc/cc email: darkangelg85atYahooDoTcom hussin.xathotmailDoTcom IRAQI HomE script : http://www.onlinebookingmanager.com demo :...