Sql injection

SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter...

CVE-2010-4737

SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter...

CVE-2010-4737

The CVE-2010-4737 entries describe a SQL injection in HotWebScripts HotWeb Rentals, exploitable via the PropResort parameter in resorts.asp. The root cause is unsanitized user input passed to a SQL query, enabling remote command execution/data access as stated across NVD and CVE records. No explo...

PT-2011-1687

Name of the Vulnerable Software and Affected Versions HotWebScripts HotWeb Rentals affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the PropResort parameter in the resorts.asp file. Recommendations At t...

CVE-2010-4737: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropResort parameter...

HotWebScripts HotWeb Rentals - resorts.asp SQL Injection

HotWebScripts HotWeb Rentals - resorts.asp SQL Injection Author: R4dc0re Exploit Title: HotWebScripts HotWeb Rentals SQL injection Vulnerability Date: 05-12-2010 Vendor or Software Link: http://www.hotwebscripts.co.uk/ Category:WebApp Price: £150 Contact: [email protected] Website: www.1337db.com...

HotWebScripts HotWeb Rentals - 'resorts.asp' SQL Injection

Author: R4dc0re Exploit Title: HotWebScripts HotWeb Rentals SQL injection Vulnerability Date: 05-12-2010 Vendor or Software Link: http://www.hotwebscripts.co.uk/ Category:WebApp Price: £150 Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effec...