Beveiligingsadvies
CVE-2008-5874
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module. NOTE: some of these details are obtained from third party information.