CVE-2008-5865
Hotel Booking Reservation System 1.0.0 - com_hbssearch - SQL Injection
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-5865. PoCs published by boom3rang.
AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in the Joomla component com_tophotelmodule. The vulnerability allows an attacker to inject SQL queries via the 'id' parameter, enabling information disclosure through boolean-based blind SQLi techniques.
Description
SQL injection vulnerability in the com_hbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the r_type parameter in a showhoteldetails action to index.php.
Exploits (4)
This exploit demonstrates a blind SQL injection vulnerability in the Joomla component com_tophotelmodule. The vulnerability allows an attacker to inject SQL queries via the 'id' parameter, enabling information disclosure through boolean-based blind SQLi techniques.
This is a writeup describing a blind SQL injection vulnerability in the Joomla component com_hbssearch. It provides example URLs demonstrating the vulnerability but does not include executable exploit code.
The exploit demonstrates a blind SQL injection vulnerability in the Joomla component com_lowcosthotels via the 'id' parameter. It includes proof-of-concept URLs that manipulate the SQL query to extract version information from the database.
This Perl script exploits a SQL injection vulnerability in the Joomla com_5starhotels component by injecting a UNION-based query to extract admin credentials (username and password hash) from the jos_users table. The exploit uses LWP::UserAgent to send a crafted HTTP request and parses the response for MD5 hashes.