CVE-2018-5072

CVE-2018-5072 describes a Cross-Site Scripting (XSS) vulnerability in Online Ticket Booking, exploitable via the admin/sitesettings.php keyword parameter. Multiple connected records confirm the issue and describe the impact as XSS, with CVSS scores from NVD indicating low–medium severity (base sc...

CVE-2018-5072: Improper Neutralization of Input During Web Page Generation

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

PT-2018-16764

Name of the Vulnerable Software and Affected Versions Online Ticket Booking affected versions not specified Description The issue concerns an XSS vulnerability via the keyword parameter in the "admin/sitesettings.php" API endpoint. Recommendations For all affected versions, consider restricting...

CVE-2017-17940

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...

CVE-2017-17939

The CVE-2017-17939 entry relates to PHP Scripts Mall Single Theater Booking and describes a Cross-Site Request Forgery (CSRF) vulnerability in the admin/sitesettings.php page. The affected software/component is PHP Scripts Mall Single Theater Booking; the underlying issue is CSRF that allows an a...

CVE-2017-17940: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...

PT-2017-15115

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a CSRF vulnerability via the admin/sitesettings.php endpoint. This means an attacker could potentially perform unauthorized actions on...

CVE-2017-17939: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php...

PT-2017-15116

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the title...

Design/Logic Flaw

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

CVE-2017-17905: Cross-Site Request Forgery (CSRF)

PHP Scripts Mall Car Rental Script has CSRF via admin/sitesettings.php...

CVE-2017-17907: Improper Neutralization of Input During Web Page Generation

PHP Scripts Mall Car Rental Script has XSS via the admin/areaedit.php carid parameter or the admin/sitesettings.php websitename parameter...

CVE-2017-17907

CVE-2017-17907 affects PHP Scripts Mall Car Rental Script and is an XSS vulnerability exploitable via the admin/areaedit.php?carid parameter or admin/sitesettings.php?websitename parameter. Public records describe reflected/stored XSS vectors in these parameters, enabling injecting HTML/JS conten...

PT-2017-15091

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue concerns a security problem where an attacker can inject malicious code. This is possible through the carid parameter in the "admin/areaedit.php" endpoint...

PT-2017-15089

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Car Rental Script affected versions not specified Description The issue concerns a CSRF vulnerability via the "admin/sitesettings.php" endpoint. This means an attacker could potentially manipulate site settings without proper...