CVE-2008-6215

EPSS 1.7%

Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/6876unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/49447 http://secunia.com/advisories/32430 https://exchange.xforce.ibmcloud.com/vulnerabilities/46225 https://www.exploit-db.com/exploits/6876 http://www.securityfocus.com/bid/31990