CVE-2014-4035
Best Soft Inc. (BSI) Advance Hotel Booking System 2.0 - XSS
Title source: llmDescription
Cross-site scripting (XSS) vulnerability in booking_details.php in Best Soft Inc. (BSI) Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter.
Exploits (1)
References (3)
Core 3
Core References
Exploit x_refsource_misc
http://packetstormsecurity.com/files/126949/BSI-Advance-Hotel-Booking-System-2.0-Cross-Site-Scripting.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/67914
Exploit, Third Party Advisory x_refsource_misc
http://packetstormsecurity.com/files/154024/BSI-Advance-Hotel-Booking-System-2.0-Cross-Site-Scripting.html
Scores
EPSS
0.0285
EPSS Percentile
86.3%
Details
CWE
CWE-79
Status
published
Products (1)
bestsoftinc/advance_hotel_booking_system
2.0
Published
Jun 11, 2014
Tracked Since
Feb 18, 2026