EUVD-2012-2917

Malware in sbrugna...

EUVD-2012-4225

Malware in sbrugna...

Travelon Express CMS 6.2.2 - Multiple Vulnerabilities

No description provided by source...

CVE-2012-4281

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to 1 holiday.php or 2 holidaybook.php, 3 id parameter to pages.php, 4 fid parameter to admin/airline-edit.php, or 5 cid parameter to...

Sql injection

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to 1 holiday.php or 2 holidaybook.php, 3 id parameter to pages.php, 4 fid parameter to admin/airline-edit.php, or 5 cid parameter to...

CVE-2012-4281

CVE-2012-4281 affects Travelon Express 6.2.2, which has multiple SQL injection vulnerabilities allowing remote attackers to execute arbitrary SQL via: wit hhid parameter to holiday.php or holiday_book.php, id parameter to pages.php, fid parameter to admin/airline-edit.php, or cid parameter to adm...

CVE-2012-4281

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to 1 holiday.php or 2 holidaybook.php, 3 id parameter to pages.php, 4 fid parameter to admin/airline-edit.php, or 5 cid parameter to...

PT-2012-5309

Name of the Vulnerable Software and Affected Versions Travelon Express version 6.2.2 Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via several API endpoints, including "holiday.php" and "holiday book.php" using the hid parameter, "pages.php"...

CVE-2012-4281: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to 1 holiday.php or 2 holidaybook.php, 3 id parameter to pages.php, 4 fid parameter to admin/airline-edit.php, or 5 cid parameter to...

CVE-2012-2939

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using 1 airline-edit.php, 2 hotel-image-add.php, or 3 hotel-add.php...

Unrestricted file upload

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using 1 airline-edit.php, 2 hotel-image-add.php, or 3 hotel-add.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to 1 holidayadd.php or 2 holidayview.php...

CVE-2012-2938

Multiple cross-site scripting XSS vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to 1 holidayadd.php or 2 holidayview.php...

CVE-2012-2938

CVE-2012-2938 describes multiple cross-site scripting (XSS) vulnerabilities in Travelon Express 6.2.2. The flaws allow remote attackers to inject arbitrary web script or HTML via the holiday name field in both holiday_add.php and holiday_view.php. The root cause is unvalidated input in the affect...

CVE-2012-2939

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using 1 airline-edit.php, 2 hotel-image-add.php, or 3 hotel-add.php...

CVE-2012-2939

CVE-2012-2939 : Travelon Express 6.2.2 contains multiple unrestricted file upload vulnerabilities. Remote authenticated users can execute arbitrary code by uploading a file with an executable extension through one of three endpoints: airline-edit.php, hotel-image-add.php, or hotel-add.php. The ro...

PT-2012-4379

Name of the Vulnerable Software and Affected Versions Travelon Express version 6.2.2 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the holiday name field to API endpoints su...

CVE-2012-2939: Undefined Security Weakness

Multiple unrestricted file upload vulnerabilities in Travelon Express 6.2.2 allow remote authenticated users to execute arbitrary code by uploading a file with an executable extension using 1 airline-edit.php, 2 hotel-image-add.php, or 3 hotel-add.php...

CVE-2012-2938: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Travelon Express 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the holiday name field to 1 holidayadd.php or 2 holidayview.php...

PT-2012-4380

Name of the Vulnerable Software and Affected Versions Travelon Express version 6.2.2 Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension using specific API endpoints, such as "airline-edit.php", "hotel-image-add.php", ...