CVE-2009-3343

CVE-2009-3343 : A SQL injection vulnerability in details.asp of HotWeb Rentals allows remote attackers to inject via the PropId parameter and execute arbitrary SQL commands. This is a remote, unsanitized-input issue; exploitation is mentioned in Exploit-DB (exploit ID 9675), but detailed exploit ...

CVE-2010-4703

CVE-2010-4703 concerns a SQL injection vulnerability affecting HotWebScripts HotWeb Rentals. The issue is in the default.asp page, exploitable via the PageId parameter, enabling remote attackers to execute arbitrary SQL commands. The available sources in the connected documents consistently descr...

CVE-2010-4737

The CVE-2010-4737 entries describe a SQL injection in HotWebScripts HotWeb Rentals, exploitable via the PropResort parameter in resorts.asp. The root cause is unsanitized user input passed to a SQL query, enabling remote command execution/data access as stated across NVD and CVE records. No explo...