CVE-2008-6215

Venalsur Booking Centre Booking System for Hotels Group - Stored Cross-Site Scripting via OfertaID Parameter

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-6215. PoCs published by d3b4g.

AI-analyzed exploit summary This exploit demonstrates SQL injection and XSS vulnerabilities in Booking System for Hotels Group by Venalsur Bookingcenter. The SQLi allows retrieval of user credentials via a UNION-based attack, while the XSS is a simple reflected payload.

Description

Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by d3b4g · textwebappsphp
https://www.exploit-db.com/exploits/6876

This exploit demonstrates SQL injection and XSS vulnerabilities in Booking System for Hotels Group by Venalsur Bookingcenter. The SQLi allows retrieval of user credentials via a UNION-based attack, while the XSS is a simple reflected payload.

Classification
Working Poc 90%
Attack Type
Sqli | Xss
Complexity
Trivial
Reliability
Reliable
Target: Booking System for Hotels Group powered by Venalsur Bookingcenter
No auth needed
Prerequisites: Access to the vulnerable endpoint
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32430
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/46225
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/31990
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/49447
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/6876

Scores

EPSS 0.0174
EPSS Percentile 74.7%

Details

CWE
CWE-79
Status published
Products (1)
bookingcentre/booking_system_for_hotels_group
Published Feb 20, 2009
Tracked Since Feb 18, 2026