CVE-2008-5875: SQL Injection
SQL injection vulnerability in the comlowcosthotels component in the Hotel Booking Reservation System (aka HBS) for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5875?
CVE-2008-5875 is classified as a medium severity vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2008-5875?
To fix CVE-2008-5875, update the com_lowcosthotels component in the Hotel Booking Reservation System to a version that addresses this SQL injection vulnerability.
What is affected by CVE-2008-5875?
CVE-2008-5875 affects the com_lowcosthotels component of the Hotel Booking Reservation System used in Joomla!.
Can CVE-2008-5875 be exploited without authentication?
Yes, CVE-2008-5875 can be exploited by unauthenticated users by manipulating the id parameter in the showhoteldetails action.
What kind of attacks can be performed using CVE-2008-5875?
Exploiting CVE-2008-5875 allows attackers to execute arbitrary SQL commands, potentially leading to data leakage or alteration.