CVE-2008-5874

This Perl script exploits a SQL injection vulnerability in the Joomla com_5starhotels component to extract admin credentials (username and password hash) from the jos_users table. It uses a UNION-based SQLi attack via the 'id' parameter in the showhoteldetails task.

This is a writeup describing a blind SQL injection vulnerability in the Joomla component com_allhotels. It provides example URLs demonstrating the vulnerability but does not include executable exploit code.

This exploit demonstrates a blind SQL injection vulnerability in the Joomla component com_lowcosthotels. The vulnerability allows an attacker to inject malicious SQL queries via the 'id' parameter, enabling information disclosure such as database version extraction.