PT-2024-11733 · Unknown · Online Flight Booking Management System

Aaditya Singh Rajawat · Published 2024-03-07 · Updated 2025-05-01 · CVE-2022-46091

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Online Flight Booking Management System version 1.0

Description The issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the airline parameter in the feedback form. This enables the execution of malicious code on the client-side.

Recommendations For Online Flight Booking Management System version 1.0, consider validating and sanitizing user input in the feedback form to prevent the injection of malicious payloads into the airline parameter. As a temporary workaround, restrict access to the feedback form until a proper fix is implemented.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-46091

Affected Products

Online Flight Booking Management System

References · 5

• 🔥 https://github.com/ASR511-OO7/CVE-2022-46091/blob/main/CVE-34 · Exploit
• https://osv.dev/vulnerability/CVE-2022-46091 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-46091 · Security Note
• https://t.me/cvenotify/89229 · Telegram Post
• https://t.me/cvenotify/120422 · Telegram Post