ClassifiedsGeek.com Vacation Packages - listing_search SQL Injection

ClassifiedsGeek.com Vacation Packages - listingsearch SQL Injection source: https://www.securityfocus.com/bid/52637/info Vacation Packages is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit...

Unfixed XSS vulnerability at www.paris-vacation-apartments.fr

Security researcher VirtualSystEm, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting www.paris-vacation-apartments.fr, which at the time of submission ranked 12503583 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2010-4635

SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental VRBO Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...

CVE-2010-4635: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in detail.asp in Site2Nite Vacation Rental VRBO Listings allows remote attackers to execute arbitrary SQL commands via the ID parameter...

PT-2010-5599

Name of the Vulnerable Software and Affected Versions Site2Nite Vacation Rental VRBO Listings affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the ID parameter in the "detail.asp" endpoint. Recommendations At the...

Vacation Rental Script v4.0 XSRF Vulnerability

Exploit for php platform in category web applications Exploit Title: Vacation Rental Script v4.0 XSRF VULNERABILTY Google Dork: "2006 - 2009 Vacation Rental Script" Date: 24.12.2010 Author: OnurTURKESHAN Software Link: http://www.vacationrentalscript.com/ Version: v.4.0 Tested on: v4.0 TEsted...

Vacation Rental Script 4.0 Cross Site Request Forgery

Exploit Title: Vacation Rental Script v4.0 XSRF VULNERABILTY Google Dork: "2006 - 2009 Vacation Rental Script" Date: 24.12.2010 Author: OnurTURKESHAN Software Link: http://www.vacationrentalscript.com/ Version: v.4.0 Tested on: v4.0 TEsted +WorKs ResPecT My FrienDz :...

Vacation Rental Script 4.0 - Cross-Site Request Forgery

Exploit Title: Vacation Rental Script v4.0 XSRF VULNERABILTY Google Dork: "2006 - 2009 Vacation Rental Script" Date: 24.12.2010 Author: OnurTURKESHAN Software Link: http://www.vacationrentalscript.com/ Version: v.4.0 Tested on: v4.0 TEsted +WorKs ResPecT My FrienDz :...

Vacation Rental Script 4.0 Shell Upload

Script Name: Vacation Rental Script = 4.0 Site: http://www.vacationrentalscript.com/ Bug: Upload Shell Found: Br0ly google dork: "2006 - 2009 Vacation Rental Script" BraZIL!! You need register a account first so: Signup: http://server/signup Cheek your email for login and password So login in:...

Vacation Rental Script 4.0 - Arbitrary File Upload

Vacation Rental Script 4.0 - Arbitrary File Upload Script Name: Vacation Rental Script = 4.0 Site: http://www.vacationrentalscript.com/ Bug: Upload Shell Found: Br0ly google dork: "2006 - 2009 Vacation Rental Script" BraZIL!! You need register a account first so: Signup: http://server/signup Chee...

Vacation Rental Script 4.0 - Arbitrary File Upload

Script Name: Vacation Rental Script = 4.0 Site: http://www.vacationrentalscript.com/ Bug: Upload Shell Found: Br0ly google dork: "2006 - 2009 Vacation Rental Script" BraZIL!! You need register a account first so: Signup: http://server/signup Cheek your email for login and password So login in:...

Site2nite Vacation Rental (VRBO) Listings SQL Injection Vulnerability

Exploit for asp platform in category web applications ===================================================================== Site2nite Vacation Rental VRBO Listings SQL Injection Vulnerability =====================================================================...

Site2nite Vacation Rental (VRBO) Listings SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Site2nite Vacation Rental VRBO Listings SQL injection Vulnerability Version:FSBO Price:100$ Vendor url:http://www.site2nite.com/ Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe,...

Site2Ntite Vacation Rental (VRBO) Listings - SQL Injection

Site2Ntite Vacation Rental VRBO Listings - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Site2nite Vacation Rental VRBO Listings SQL injection Vulnerability Version:FSBO Price:100$ Vendor url:http://www.site2nite.com/ Published: 2010-11-02 Thanx to:r0073r...

Site2Ntite Vacation Rental (VRBO) Listings - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Site2nite Vacation Rental VRBO Listings SQL injection Vulnerability Version:FSBO Price:100$ Vendor url:http://www.site2nite.com/ Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic, M4n0j,SeeMe,...

My Vacation Tracker DLL Hijacking Exploit (svctaglib.dll)

Exploit for windows platform in category local exploits ========================================================= My Vacation Tracker DLL Hijacking Exploit svctaglib.dll ========================================================= / My Vacation Tracker DLL Hijacking Exploit svctaglib.dll Author :...

My Vacation Tracker DLL Hijacking

/ My Vacation Tracker DLL Hijacking Exploit svctaglib.dll Author : anT!-Tr0J4n Greetz : Dev-PoinT.com inj3ct0r.com All Dev-poinT members and my friends Email : D3v-PoinTathotmaild0tcom & C1EHatHotmaild0tcom Software Link:http://www.myvacationtracker.com Tested on: Windows XP sp3 Home :...

Sql injection

SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rentalid parameter in a CalendarView action...

CVE-2010-0763

SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rentalid parameter in a CalendarView action...

CVE-2010-0763

SQL injection vulnerability in index.php in CommodityRentals Vacation Rental Software allows remote attackers to execute arbitrary SQL commands via the rentalid parameter in a CalendarView action...