VYPR

Hotel Booking Reservation System

by Joomlahbs

CVEs (4)

  • CVE-2008-5875Jan 8, 2009
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php.

  • CVE-2008-5874Jan 8, 2009
    risk 0.03cvss epss 0.00

    Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module. NOTE: some of these details are obtained from third party information.

  • CVE-2008-5865Jan 6, 2009
    risk 0.03cvss epss 0.01

    SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the r_type parameter in a showhoteldetails action to index.php.

  • CVE-2008-5864Jan 6, 2009
    risk 0.03cvss epss 0.00

    SQL injection vulnerability in the Top Hotel (com_tophotelmodule) component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php.