PT-2018-16766

CVE-2018-5074

·

Publicado

2018-01-03

·

Atualizado

2018-01-16

Descrição por

CVSS 2.0
3.5
Baixa
MétricasAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions Online Ticket Booking (affected versions not specified)
Description The issue is related to a security problem where an attacker can inject malicious code. Specifically, it involves the contact parameter in the "admin/manageownerlist.php" API endpoint.
Recommendations For all affected versions, avoid using the contact parameter in the "admin/manageownerlist.php" endpoint until the issue is resolved.
Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Identificadores relacionados
CVE-2018-5074
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com