PT-2014-5687
CVE-2014-4035
·
تاريخ النشر
2014-06-11
·
تاريخ التحديث
2019-08-12
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Best Soft Inc. (BSI) Advance Hotel Booking System version 2.0
Description
The issue is related to a cross-site scripting (XSS) vulnerability. It allows remote attackers to inject arbitrary web script or HTML via the
title parameter in the booking details.php file.Recommendations
For Best Soft Inc. (BSI) Advance Hotel Booking System version 2.0, avoid using the
title parameter in the booking details.php file until a fix is available. As a temporary workaround, consider validating and sanitizing user input for the title parameter to prevent malicious script injections. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾