CVE-2014-4035: XSS

Published Jun 11, 2014

Updated

Cross-site scripting (XSS) vulnerability in bookingdetails.php in Best Soft Inc. (BSI) Advance Hotel Booking System 2.0 allows remote attackers to inject arbitrary web script or HTML via the title parameter.

Affected Software

1 affected component

bestsoftinc Advance Hotel Booking System=2.0

Event History

Jun 11, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:55 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-4035?

CVE-2014-4035 is considered a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2014-4035?

To fix CVE-2014-4035, sanitize user inputs and properly encode output to prevent script injection through the title parameter.

Who is affected by CVE-2014-4035?

CVE-2014-4035 affects users of the Best Soft Inc. Advance Hotel Booking System version 2.0.

What type of vulnerability is CVE-2014-4035?

CVE-2014-4035 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts.

Can CVE-2014-4035 allow for data theft?

Yes, if exploited, CVE-2014-4035 can enable attackers to steal sensitive user information through malicious scripts.