Lucene search
+L

6 matches found

NVD
NVD
•added 2021/05/10 8:15 p.m.•22 views

CVE-2020-18102

Cross Site Scripting XSS in HotelsServer v1.0 allows remote attackers to execute arbitrary code by injecting crafted commands the data fields in the component "/controller/publishHotel.php"...

6.1CVSS0.01246EPSS
SaveExploits1References1
Prion
Prion
•added 2021/05/10 8:15 p.m.•31 views

Cross site scripting

Cross Site Scripting XSS in HotelsServer v1.0 allows remote attackers to execute arbitrary code by injecting crafted commands the data fields in the component "/controller/publishHotel.php"...

4.3CVSS6.3AI score0.01246EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/05/10 7:18 p.m.•8 views

CVE-2020-18102

Cross Site Scripting XSS in HotelsServer v1.0 allows remote attackers to execute arbitrary code by injecting crafted commands the data fields in the component "/controller/publishHotel.php"...

6.1CVSS0.01246EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/05/10 12:00 a.m.•21 views

Hotels_Server 跨站脚本漏洞

HotelsServer is a backend management system for hotel reservation systems. A cross-site scripting vulnerability exists in HotelsServer version 1.0. The vulnerability originates from a program that allows remote attackers to inject data fields in the component "/controller/publishHotel.php" to...

6.1CVSS6.3AI score0.01246EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/05/10 12:00 a.m.•9 views

PT-2021-3911

Name of the Vulnerable Software and Affected Versions Hotels Server version 1.0 Description The issue is related to Cross Site Scripting XSS that allows remote attackers to execute arbitrary code. This is achieved by injecting crafted commands into the data fields in the...

6.1CVSS0.01246EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/10 12:00 a.m.•13 views

CVE-2020-18102: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in HotelsServer v1.0 allows remote attackers to execute arbitrary code by injecting crafted commands the data fields in the component "/controller/publishHotel.php"...

6.1CVSS6.4AI score0.01246EPSS
SaveExploits1References2
Rows per page
Query Builder