CVE-2008-5865: SQL Injection
SQL injection vulnerability in the comhbssearch component 1.0 in the Hotel Booking Reservation System (aka HBS) 1.0.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the rtype parameter in a showhoteldetails action to index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5865?
CVE-2008-5865 is classified as a critical SQL injection vulnerability that can allow attackers to execute arbitrary SQL commands.
How do I fix CVE-2008-5865?
To fix CVE-2008-5865, update the com_hbssearch component for Hotel Booking Reservation System to the latest version or remove the affected component.
What systems are affected by CVE-2008-5865?
CVE-2008-5865 affects version 1.0.0 of the Hotel Booking Reservation System component for Joomla.
Can CVE-2008-5865 be exploited remotely?
Yes, CVE-2008-5865 can be exploited remotely by attackers via the r_type parameter in a specific action.
What are the potential impacts of CVE-2008-5865?
Exploitation of CVE-2008-5865 can lead to unauthorized access to sensitive data and manipulation of the backend database.