CVE-2009-3368

CVE-2009-3368 concerns a cross-site scripting (XSS) flaw in the Joomla! Hotel Booking Reservation System (HBS/com_hbssearch). The vulnerability allows remote attackers to inject arbitrary web script or HTML via the adult parameter in the showhoteldetails action to index.php. No remediation or exp...

CVE-2009-3357

CVE-2009-3357 covers multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (HBS / com_hbssearch) for Joomla!. The affected vectors target the longDesc.php script via (1) h_id, (2) id, (3) rid parameters, and the detail*.php scripts via h_id (4) detail.php, (5) detail1.php...