5 matches found
CVE-2018-5078
Online Ticket Booking has XSS via the admin/eventlist.php cast parameter...
CVE-2018-5078
The CVE-2018-5078 entry concerns a Cross-Site Scripting (XSS) vulnerability in the Online Ticket Booking system, exploitable via the admin/eventlist.php cast parameter. Connected sources consistently describe XSS as the flaw and point to the same parameter as the vector, but there are no accompan...
CVE-2018-5078
Online Ticket Booking has XSS via the admin/eventlist.php cast parameter...
PT-2018-16770
Name of the Vulnerable Software and Affected Versions Online Ticket Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. Specifically, it involves the cast parameter in the "admin/eventlist.php" API endpoint...
