PT-2011-5192 · Php · Wp Booking Calendar

Henri Salo · Published 2011-12-30 · Updated 2017-08-29 · CVE-2011-5045

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP Booking Calendar version 10e

Description A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the page info message parameter in the details view.php file.

Recommendations For PHP Booking Calendar version 10e, avoid using the page info message parameter in the details view.php file until a fix is available. As a temporary workaround, consider validating and sanitizing user input to prevent malicious code injection.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2011-5045

Affected Products

Wp Booking Calendar

References · 5

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2011-12/0124.html · Exploit
• 🔥 https://exploit-db.com/exploits/36468 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2011-5045 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/71883 · Note
• http://sourceforge.net/tracker/?func=detail&aid=3469106&group_id=132702&atid=724998 · Note