CVE-2006-3049

Multiple cross-site scripting XSS vulnerabilities in booking3.php in Mole Group Ticket Booking Script allow remote attackers to inject arbitrary web script or HTML via the 1 name, 2 address1, 3 address2, 4 county, 5 postcode, 6 email, 7 phone, or 8 mobile parameters to booking2.php...

CVE-2006-3049

The CVE-2006-3049 entry describes multiple cross-site scripting (XSS) flaws in Mole Group’s Ticket Booking Script, specifically in booking3.php, exploitable via the following parameters passed to booking2.php: name, address1, address2, county, postcode, email, phone, and mobile. Exploitation woul...

mole.com.ua Booking Script

Booking Script. Homepage: http://www.mole.com.ua PError with full path disclosure and possible buffer overflow?: http://www.example.com/week.php?year=2006&month=06&day=0' Warning: checkdate expects parameter 2 to be long, string given in...