CVE-2009-3368

EPSS 1.5%

Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php.

Affected products

n/a · n/a

public PoCs found — 2

cve_referencewww.exploit-db.com/exploits/9648unverified exploitdbwww.exploit-db.com/exploits/9648unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://e-rdc.org/v1/news.php?readmore=142 http://secunia.com/advisories/33215 http://www.exploit-db.com/exploits/9648 http://www.securityfocus.com/archive/1/506444/100/0/threaded http://www.securityfocus.com/bid/36380