CVE-2018-5072

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.

Metrics

CVSS 3.0 4.8/10CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jan 3, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-50736.8Online Ticket Booking has CSRF via admin/movieedit.php.CVE-2018-50744.8Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.CVE-2018-50754.8Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.CVE-2018-50764.8Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.CVE-2018-50774.8Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.CVE-2018-50784.8Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.CVE-2018-50797.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50807.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50817.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50827.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50837.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50847.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie
CVE-2018-5072: Medium severity, CVSS 4.8 | Vulnix