PT-2018-16766
CVE-2018-5074
·
تاريخ النشر
2018-01-03
·
تاريخ التحديث
2018-01-16
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Online Ticket Booking (affected versions not specified)
Description
The issue is related to a security problem where an attacker can inject malicious code. Specifically, it involves the
contact parameter in the "admin/manageownerlist.php" API endpoint.Recommendations
For all affected versions, avoid using the
contact parameter in the "admin/manageownerlist.php" endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾