CVE-2008-5865

EPSS 1.0%

SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the r_type parameter in a showhoteldetails action to index.php.

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/7575unverified cve_referencewww.exploit-db.com/exploits/7538unverified exploitdbwww.exploit-db.com/exploits/7567unverified exploitdbwww.exploit-db.com/exploits/7539unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/33215 http://securityreason.com/securityalert/4870 https://exchange.xforce.ibmcloud.com/vulnerabilities/47539 https://www.exploit-db.com/exploits/7538 http://www.securityfocus.com/bid/32951