CVE-2008-5874
joomlahbs: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module. NOTE: some of these details are obtained from third party information.
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
- CWE
- CWE-89
- Published
- Modified
- Record from
- the NVD, synced
Affected
- joomlahbs:com_5starhotels
- joomlahbs:com_allhotels
- joomlahbs:hotel_booking_reservation_system