cnvd-2018-05584
Vulnerability from cnvd
Title
MTS Simple Booking C和MTS Simple Booking Business跨站脚本漏洞
Description
MTS Simple Booking C和MTS Simple Booking Business都是日本MT Systems公司开发的应用在WordPress中的在线预定插件。 MTS Simple Booking C和MTS Simple Booking Business 1.28.0及之前版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意的Web脚本或HMTL。
Severity
中
Patch Name
MTS Simple Booking C和MTS Simple Booking Business跨站脚本漏洞的补丁
Patch Description
MTS Simple Booking C和MTS Simple Booking Business都是日本MT Systems公司开发的应用在WordPress中的在线预定插件。 MTS Simple Booking C和MTS Simple Booking Business 1.28.0及之前版本中存在跨站脚本漏洞。远程攻击者可利用该漏洞注入任意的Web脚本或HMTL。 目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： http://mtssb.mt-systems.jp/jvn99312352/

Reference
http://jvn.jp/en/jp/JVN99312352/
Impacted products
Name
['MT Systems Co., Ltd. Simple Booking C', 'MT Systems Co., Ltd. Simple Booking Business <=1.28.0']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0513"
    }
  },
  "description": "MTS Simple Booking C\u548cMTS Simple Booking Business\u90fd\u662f\u65e5\u672cMT Systems\u516c\u53f8\u5f00\u53d1\u7684\u5e94\u7528\u5728WordPress\u4e2d\u7684\u5728\u7ebf\u9884\u5b9a\u63d2\u4ef6\u3002\r\n\r\nMTS Simple Booking C\u548cMTS Simple Booking Business 1.28.0\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u4efb\u610f\u7684Web\u811a\u672c\u6216HMTL\u3002",
  "discovererName": "Daichi Takaki of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttp://mtssb.mt-systems.jp/jvn99312352/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-05584",
  "openTime": "2018-03-19",
  "patchDescription": "MTS Simple Booking C\u548cMTS Simple Booking Business\u90fd\u662f\u65e5\u672cMT Systems\u516c\u53f8\u5f00\u53d1\u7684\u5e94\u7528\u5728WordPress\u4e2d\u7684\u5728\u7ebf\u9884\u5b9a\u63d2\u4ef6\u3002\r\n\r\nMTS Simple Booking C\u548cMTS Simple Booking Business 1.28.0\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6ce8\u5165\u4efb\u610f\u7684Web\u811a\u672c\u6216HMTL\u3002 \u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "MTS Simple Booking C\u548cMTS Simple Booking Business\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "MT Systems Co., Ltd. Simple Booking C",
      "MT Systems Co., Ltd. Simple Booking Business \u003c=1.28.0"
    ]
  },
  "referenceLink": "http://jvn.jp/en/jp/JVN99312352/",
  "serverity": "\u4e2d",
  "submitTime": "2018-02-05",
  "title": "MTS Simple Booking C\u548cMTS Simple Booking Business\u8de8\u7ad9\u811a\u672c\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.