Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 16/02/2011 Updated: 22/09/2011

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in resorts.asp in HotWebScripts HotWeb Rentals allows remote malicious users to execute arbitrary SQL commands via the PropResort parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
hotwebscripts hotweb rentals

# Author: R4dc0re # Exploit Title: HotWebScripts HotWeb Rentals SQL injection Vulnerability # Date: 05-12-2010 # Vendor or Software Link: wwwhotwebscriptscouk/ # Category:WebApp # Price: Â£150 # Contact: R4dc0re@yahoofr # Website: www1337dbcom # Greetings to: R0073r(1337dbcom), L0rd CrusAd3r,Sid3^effects and to rest of the 1337db me ...

CWE-89 http://packetstormsecurity.org/files/view/96388/hotwebrentals-sqlpr.txt http://www.exploit-db.com/exploits/15688 http://www.securityfocus.com/bid/45184 http://secunia.com/advisories/36747 http://securityreason.com/securityalert/8085 https://nvd.nist.gov https://www.exploit-db.com/exploits/15688/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2010-4737

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect