CVE:CVE-2018-5073
CNNVD:CNNVD-201801-109
Online Ticket Booking是一套在线票务预订系统。
Online Ticket Booking中存在跨站请求伪造漏洞。远程攻击者可借助admin/movieedit.php文件利用该漏洞执行更改操作。
solution:Upgrade advanced_real_estate_script_project advanced_real_estate_script to a higher version than -