CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Insertion of Sensitive Information Into Sent Data vulnerability in e4jvikwp VikBooking Hotel Booking Engine & PMS vikbooking allows Retrieve Embedded Sensitive Data.This issue affects VikBooking Hotel Booking Engine & PMS: from n/a through <= 1.8.2.
Explanation of Vulnerability in Simple Terms
VikBooking Hotel Booking Engine & PMS versions 1.8.2 and earlier contain an information disclosure vulnerability. An attacker on the network can retrieve sensitive data without authentication, though the attack requires specific conditions to succeed. The vulnerability does not allow modification or deletion of data, only unauthorized access to confidential information.
What an attacker can do
Read sensitive information from the booking system without logging in.
Potential impact on your site
Guest booking data, payment details, or other confidential information may be exposed to unauthorized parties.
Conditions required to exploit
Network access to the VikBooking installation; specific attack conditions must be met (high complexity).
Key dates
External resources
