CVE-2015-2858: Undefined Security Weakness

Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to 1 ValidateFormAction.do or 2 ProfileConfirmEditAddressAction.do...

PT-2015-5941

Name of the Vulnerable Software and Affected Versions Datalex airline booking software versions prior to 2015-09-03 Description The issue allows remote attackers to read or write to arbitrary user data. This can be achieved by modifying the profileId parameter in specific API endpoints, such as...