CVE-2008-5874 Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails...
HighCVSS 7.5
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomlahbs com 5starhotels | = _nil_ | No fix listed |
| joomlahbs com allhotels | = _nil_ | No fix listed |
| joomlahbs hotel booking reservation system | = _nil_ | No fix listed |
References
- downloads.securityfocus.com exploit
- 32952 exploit vdb-entry
- 7568 exploit
- 7575 exploit