CVE-2015-2858 in Airline Booking Software信息

摘要

由 VulDB • 2026-06-02

Datalex airline booking software 在 2015-09-03 之前的版本允许远程攻击者通过向 (1) ValidateFormAction.do 或 (2) ProfileConfirmEditAddressAction.do 发送修改后的 profileId 参数，读取或写入任意用户数据。

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2015-04-03

披露

2015-10-01

管理

已接受

条目

VDB-78186

CPE

准备好

CWE

CWE-639 (已确认)

CVSS

7.5 (NVD)

EPSS

0.01516

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2015-2858
NVD	https://nvd.nist.gov/vuln/detail/CVE-2015-2858
CVE Details	https://www.cvedetails.com/cve/CVE-2015-2858/

◂ 上一步一览下一步 ▸

Might our Artificial Intelligence support you?

Check our Alexa App!