TI-2015-02523 CVE-2015-2858 · GHSA-rw2j-93c5-hrmf
Datalex airline booking software before 2015-09-03 allows remote attackers to read or…
Priority LOW 36
Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do…