Hotel Reservation System Security Vulnerabilities - May

CVE-2008-4204

SQL injection vulnerability in city.asp in SoftAcid Hotel Reservation System (HRS) allows remote attackers to execute arbitrary SQL commands via the city parameter.