Code injection

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter...

CVE-2018-5076

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter...

CVE-2018-5076

CVE-2018-5076 is a Cross-Site Scripting (XSS) vulnerability affecting the Online Ticket Booking component of the Advanced Real Estate Script family. Multiple sources (NVD, Red Hat advisory, CNVD) describe an XSS flaw that can be exploited via the admin/newsedit.php news title parameter, enabling ...

CVE-2018-5076: Improper Neutralization of Input During Web Page Generation

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter...

PT-2018-16768

Name of the Vulnerable Software and Affected Versions Online Ticket Booking affected versions not specified Description The issue concerns an XSS vulnerability. It is related to the newstitle parameter in the "admin/newsedit.php" API endpoint. Recommendations For all affected versions, avoid usin...