PT-2011-5192 · Php · Wp Booking Calendar

Henri Salo · Publicado 2011-12-30 · Atualizado 2017-08-29 · CVE-2011-5045

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP Booking Calendar version 10e

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the page info message parameter in the details view.php file.

Recommendations For PHP Booking Calendar version 10e, avoid using the page info message parameter in the details view.php file until a fix is available. As a temporary workaround, consider validating and sanitizing user input to prevent malicious code injection.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2011-5045

Produtos afetados

Wp Booking Calendar

Referências · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2011-12/0124.html · Exploit
• 🔥 https://exploit-db.com/exploits/36468 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5045 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71883 · Nota
• http://sourceforge.net/tracker/?func=detail&aid=3469106&group_id=132702&atid=724998 · Nota