Skip to content
OpenAdvisories

Product · cmsjunkie

JHotelReservation

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    Joomla JHotelReservation 6.0.7 SQL Injection via search-hotels

    Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rooms parameter. Attackers can send POST requests to the search-hotels endpoi…