Design/Logic Flaw

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter...

CVE-2018-5074: Improper Neutralization of Input During Web Page Generation

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter...

PT-2018-16766

Name of the Vulnerable Software and Affected Versions Online Ticket Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. Specifically, it involves the contact parameter in the "admin/manageownerlist.php" API...