Exploitation Summary
EIP tracks 3 public exploits for CVE-2008-5875. PoCs published by EcHoLL, Hussin X.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in the Joomla com_5starhotels component to extract admin credentials (username and password hash) from the jos_users table. It uses a UNION-based SQLi attack via the 'id' parameter in the showhoteldetails task.
Description
SQL injection vulnerability in the com_lowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php.
Exploits (3)
This Perl script exploits a SQL injection vulnerability in the Joomla com_5starhotels component to extract admin credentials (username and password hash) from the jos_users table. It uses a UNION-based SQLi attack via the 'id' parameter in the showhoteldetails task.
This is a writeup describing a blind SQL injection vulnerability in the Joomla component com_lowcosthotels. It provides example URLs demonstrating the exploit but does not include executable code.
This is a writeup describing a blind SQL injection vulnerability in the Joomla component com_allhotels. It provides example URLs demonstrating the vulnerability but does not include executable exploit code.