CVE-2008-5874: Joomlahbs Com 5starhotels

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS) for Joomla! allow remote attackers to execute arbitrary SQL commands via the id parameter in a showhoteldetails action to index.php in the (1) com_allhotels or (2) com_5starhotels module. NOTE: some of these details are obtained from third party information.

Affected products

• Joomlahbs Com 5starhotels: version _nil_ only
• Joomlahbs Com Allhotels: version _nil_ only
• Joomlahbs Hotel Booking Reservation System: version _nil_ only

Published 2009-01-08. Last modified 2026-06-16.