admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified user_id field.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Bus_ticket_script | Mole-group | - (including) | - (including) |
Sky_hunter_airline_ticket_sale_script | Mole-group | - (including) | - (including) |