| Package | Affected versions | Patched versions |
|---|---|---|
| com 5starhotels | = _nil_ | |
| com allhotels | = _nil_ | |
| hotel booking reservation system | = _nil_ |
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free