Airline Reservation System
Monthly
Reflected cross-site scripting in the 'max' argument of /book_flight.php in itsourcecode Airline Reservation System 1.0 allows attackers to execute script in a victim's browser session. The exploit is not authenticated (PR:N) but requires victim interaction (UI:P), so it is a targeted, social-engineering-dependent issue rather than a self-propagating or server-side compromise; impact is bounded to low integrity only, with no confidentiality or availability effect. A public PoC reference exists but it is not verified as working exploit code, EPSS is low at 0.35% (28th percentile), there is no KEV status, and the vuln.today decision label is 'monitor'.
A vulnerability was found in itsourcecode Airline Reservation System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Airline Reservation System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Airline Reservation System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Reflected cross-site scripting in the 'max' argument of /book_flight.php in itsourcecode Airline Reservation System 1.0 allows attackers to execute script in a victim's browser session. The exploit is not authenticated (PR:N) but requires victim interaction (UI:P), so it is a targeted, social-engineering-dependent issue rather than a self-propagating or server-side compromise; impact is bounded to low integrity only, with no confidentiality or availability effect. A public PoC reference exists but it is not verified as working exploit code, EPSS is low at 0.35% (28th percentile), there is no KEV status, and the vuln.today decision label is 'monitor'.
A vulnerability was found in itsourcecode Airline Reservation System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Airline Reservation System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Airline Reservation System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability was found in itsourcecode Airline Reservation System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
A vulnerability has been found in itsourcecode Airline Reservation System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.