CVE-2008-6303

SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter...

Sql injection

SQL injection vulnerability in tourview.php in ToursManager allows remote attackers to execute arbitrary SQL commands via the tourid parameter...

CVE-2008-6303

CVE-2008-6303 describes an SQL injection vulnerability in ToursManager's tourview.php, exploitable via the tourid parameter. The underlying issue is that user-supplied input is used in SQL queries without proper validation or parameterization, enabling remote attackers to execute arbitrary SQL co...

ToursManager - 'tourview.php' Blind SQL Injection

Name:-- ToursManager PhP Script Discovered by:-- XaDoS ContacT m&:-- xadosathotmail.it Site:-- http://www.toursmanager.com ■£XpLoIT: |: http://www.demosite.com/tourview.php?tourid=2%20and%201=1-- true |: http://www.demosite.com/tourview.php?tourid=2%20and%201=0-- false Version: |:...