CVE-2023-39421

概要

参考情報

• bitdefender.com/blog/labs/check-out-with-extra-charges-vulnerabilities-in-hotel-booking-engine-explained · Third Party Advisory

internet reservation module next generation のその他の脆弱性

• CVE-2023-39424高 8.8A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary cont…
• CVE-2023-39423緊急 9.1The RDPData.dll file exposes the /irmdata/api/common endpoint that handles session IDs,  among other features. By using a UNION SQL operator…
• CVE-2023-39420高 8.8The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" ac…