PT-2014-6678

Name of the Vulnerable Software and Affected Versions The Slots Vacation - FREE Slots aka com.scopely.slotsvacation version 1.47.2 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate, as the application does not veri...

CVE-2014-5693: Undefined Security Weakness

The Slots Vacation - FREE Slots aka com.scopely.slotsvacation application 1.47.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Vacation Rental Script 4.0 - Arbitrary File Upload Vulnerability

No description provided by source. Script Name: Vacation Rental Script = 4.0 Site: http://www.vacationrentalscript.com/ Bug: Upload Shell Found: Br0ly google dork: 2006 - 2009 Vacation Rental Script BraZIL!! You need register a account first so: Signup: http://server/signup Cheek your email for...

PHPJabbers Vacation Rental Script 3.0 - Multiple Vulnerabilities

No description provided by source. Vacation Rental Script V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

MYREphp Vacation Rental Software Multiple Vulnerabilities

No description provided by source. Exploit Title: MYREphp Vacation Rental Software Multiple Vulnerabilities Date: 13.10.201 Exploit Author: d3b4g Vendor Homepage:http://myrephp.com Software Link: http://myrephp.com/vacation/ Tested on: Windows 7 Blog: d3b4g.me...

Site2Ntite Vacation Rental (VRBO) Listings SQL Injection Vulnerability

No description provided by source. Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Site2nite Vacation Rental VRBO Listings SQL injection Vulnerability Version:FSBO Price:100$ Vendor url:http://www.site2nite.com/ Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects,...

Vacation Rental Script 4.0 - CSRF Vulnerability

No description provided by source. Exploit Title: Vacation Rental Script v4.0 XSRF VULNERABILTY Google Dork: 2006 - 2009 Vacation Rental Script Date: 24.12.2010 Author: OnurTURKESHAN Software Link: http://www.vacationrentalscript.com/ Version: v.4.0 Tested on: v4.0 TEsted +WorKs ResPecT My FrienD...

PHPJabbers Vacation Rental Script 3.0多个漏洞

No description provided by source. Vacation Rental Script V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

PHPJabbers Vacation Rental Script 3.0 - Multiple Vulnerabilities

PHPJabbers Vacation Rental Script 3.0 - Multiple Vulnerabilities Vacation Rental Script V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

PHPJabbers Vacation Packages Listing 2.0 - Multiple Vulnerabilities

PHPJabbers Vacation Packages Listing 2.0 - Multiple Vulnerabilities Vacation Packages Listing V2.0 - Multiple Vulnerabilities ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script :...

PHPJabbers Vacation Packages Listing V2.0 - Multiple Vulnerabilties

Exploit for php platform in category web applications Vacation Packages Listing V2.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home : http://www.iphobos.com/blog/ .:. Script :...

PHPJabbers Vacation Rental Script V3.0 - Multiple Vulnerabilties

Exploit for php platform in category web applications Vacation Rental Script V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home : http://www.iphobos.com/blog/ .:. Script :...

PHPJabbers Vacation Rental Script 3.0 - Multiple Vulnerabilities

Vacation Rental Script V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/vacation-rental-script/ === Exploit === 1 Cros...

PHPJabbers Vacation Packages Listing 2.0 - Multiple Vulnerabilities

Vacation Packages Listing V2.0 - Multiple Vulnerabilities ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/vacation-packages/ === Exploit === 1 Cross...

Vacation Packages Listing 2.0 CSRF / XSS / File Disclosure

Vacation Packages Listing V2.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/vacation-packages/ .:. Tested On Demo :...

CVE-2012-6586

Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL commands via the 1 garage1 or 2 bathrooms1 parameter to vacation/1mobile/search.php, or 3 unspecified input to vacation/widgate/requestmoreinformation.php...

CVE-2012-6587

Cross-site scripting XSS vulnerability in vacation/1mobile/alertmembers.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the linkidd parameter in a login action...

Sql injection

Multiple SQL injection vulnerabilities in MYRE Vacation Rental Software allow remote attackers to execute arbitrary SQL commands via the 1 garage1 or 2 bathrooms1 parameter to vacation/1mobile/search.php, or 3 unspecified input to vacation/widgate/requestmoreinformation.php...

Cross site scripting

Cross-site scripting XSS vulnerability in vacation/1mobile/alertmembers.php in MYRE Vacation Rental Software allows remote attackers to inject arbitrary web script or HTML via the linkidd parameter in a login action...

CVE-2012-6587

CVE-2012-6587 describes an XSS vulnerability in MYRE Vacation Rental Software, specifically in the file vacation/1_mobile/alert_members.php where an attacker can inject arbitrary script/HTML via the link_idd parameter during a login action. The issue enables remote script execution by manipulatin...