CVE-2014-4035

Cross-site scripting XSS vulnerability in bookingdetails.php in Best Soft Inc. BSI Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter...

CVE-2014-4035

CVE-2014-4035 affects Best Soft Inc. (BSI) Advance Hotel Booking System 2.0. The vulnerability is a cross-site scripting (XSS) in booking_details.php where the attacker can inject arbitrary script via the title parameter. Public materials (exploits and writeups) indicate a persistent XSS variant ...