Filtered by vendor Datalex Subscriptions
Filtered by product Airline Booking Software Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-2858 1 Datalex 1 Airline Booking Software 2025-04-12 N/A
Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do.