MitreCVE-2008-5874CVE-2008-5874
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
42.2%
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module. NOTE: some of these details are obtained from third party information.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| joomlahbs | com_5starhotels | _nil_ | cpe:2.3:a:joomlahbs:com_5starhotels:_nil_:*:*:*:*:*:*:* |
| joomlahbs | com_allhotels | _nil_ | cpe:2.3:a:joomlahbs:com_allhotels:_nil_:*:*:*:*:*:*:* |
| joomlahbs | hotel_booking_reservation_system | _nil_ | cpe:2.3:a:joomlahbs:hotel_booking_reservation_system:_nil_:*:*:*:*:*:*:* |
| joomla | joomla | * | cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
42.2%