Security Advisory

CVE-2008-5875

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2009-01-08 19:00:00
Last updated 2024-08-07 11:13:13
Assigner mitre
State PUBLISHED

Description

SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php.