CVE-2006-3049

The CVE-2006-3049 entry describes multiple cross-site scripting (XSS) flaws in Mole Group’s Ticket Booking Script, specifically in booking3.php, exploitable via the following parameters passed to booking2.php: name, address1, address2, county, postcode, email, phone, and mobile. Exploitation woul...