Hotel / Resort Site Script SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members DESCRIPTION: Internal system for tot...

Hotel / Resort Site Script with OnLine Reservation System SQL Injection

Exploit for php platform in category web applications ======================================================================= Hotel / Resort Site Script with OnLine Reservation System SQL Injection ======================================================================= Author: L0rd CrusAd3r aka V...

Hotel Resort Site Script with OnLine Reservation System - SQL Injection

Hotel Resort Site Script with OnLine Reservation System - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects,...

CVE-2009-3357

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS or comhbssearch component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 hid, 2 id, and 3 rid parameters to longDesc.php, and the hid parameter to 4 detail.php, 5 detail1.php, 6...

CVE-2009-3357

CVE-2009-3357 covers multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (HBS / com_hbssearch) for Joomla!. The affected vectors target the longDesc.php script via (1) h_id, (2) id, (3) rid parameters, and the detail*.php scripts via h_id (4) detail.php, (5) detail1.php...

CVE-2009-3357

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS or comhbssearch component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 hid, 2 id, and 3 rid parameters to longDesc.php, and the hid parameter to 4 detail.php, 5 detail1.php, 6...

CVE-2009-3368: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Hotel Booking Reservation System aka HBS or comhbssearch component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php...

CVE-2009-3357: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS or comhbssearch component for Joomla! allow remote attackers to execute arbitrary SQL commands via the 1 hid, 2 id, and 3 rid parameters to longDesc.php, and the hid parameter to 4 detail.php, 5 detail1.php, 6...

phpScheduleIt Detection

This host is running phpScheduleIt, an Open Source web-based reservation and scheduling system. OpenVAS Vulnerability Test $Id: phpScheduleItdetect.nasl 5739 2017-03-27 14:48:05Z cfi $ phpScheduleIt Detection Authors: Michael Meyer Copyright: Copyright c 2009 Greenbone Networks GmbH This program ...

CVE-2008-5875

SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System aka HBS for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

Sql injection

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5874

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5875

SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System aka HBS for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5875: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System aka HBS for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5874: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System aka HBS for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the 1 comallhotels or 2 com5starhotels module. NOTE: some of these details...

CVE-2008-5865

SQL injection vulnerability in the comhbssearch component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the rtype parameter in a showhoteldetails action to index.php...

CVE-2008-5865

CVE-2008-5865 affects the com_hbssearch component (Hotel Booking Reservation System, aka HBS) version 1.0 in Joomla! 1.0.0. The vulnerability is an SQL injection via the r_type parameter in a showhoteldetails action to index.php, allowing remote attackers to execute arbitrary SQL commands. The pr...

CVE-2008-5864: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Top Hotel comtophotelmodule component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php...

CVE-2008-5865: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the comhbssearch component 1.0 in the Hotel Booking Reservation System aka HBS 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the rtype parameter in a showhoteldetails action to index.php...

CVE-2008-4204: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System HRS allows remote attackers to execute arbitrary SQL commands via the city parameter...