CVE-2026-13556: itsourcecode Online Hotel Management System, инжекция

Описание

Оригинално описание

A vulnerability was determined in itsourcecode Online Hotel Management System 1.0. This affects an unknown part of the file /admin/mod_users/controller.php?action=edit of the component POST Request Handler. This manipulation of the argument Name causes cross site scripting. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

Засегнати продукти

• itsourcecode Online Hotel Management System: 1.0

Вид слабост

• CWE-79 XSS
• CWE-94 Неправилен контрол при генериране на код

История

Други уязвимости в itsourcecode Online Hotel Management System

• 7.3CVE-2026-14688
• 5.3CVE-2026-13557
• 7.3CVE-2026-13555
• 5.3CVE-2026-13554
• 7.3CVE-2026-13553

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-13556
• https://nvd.nist.gov/vuln/detail/CVE-2026-13556
• https://vuldb.com/vuln/374564
• https://vuldb.com/vuln/374564/cti
• https://vuldb.com/cve/CVE-2026-13556
• https://vuldb.com/submit/843586
• https://github.com/Hh-176/CVE/issues/7
• https://itsourcecode.com/