Datalex

datalex

2 CVEs • 2 products

Products (2)

Click to collapse

Toggle

Bookit Consumer

bookit_consumer

1 CVE

Airline Booking Software

airline_booking_software

1 CVE

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2015-2858 1Datalex 1Airline Booking Software May 6, 2026 Oct 2, 2015 N/A· v4 N/A· v3 7.5 HIGH· v2 Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do...Show more Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do.Show less
CVE-2002-0933 1Datalex 1Bookit Consumer Apr 16, 2026 Oct 4, 2002 N/A· v4 N/A· v3 7.5 HIGH· v2 Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2015-2858

1Datalex

1Airline Booking Software

May 6, 2026

Oct 2, 2015

N/A· v4

N/A· v3

7.5 HIGH· v2

Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId parameter to (1) ValidateFormAction.do or (2) ProfileConfirmEditAddressAction.do...Show more

CVE-2002-0933

1Datalex

1Bookit Consumer

Apr 16, 2026

Oct 4, 2002

N/A· v4

N/A· v3

7.5 HIGH· v2

Datalex PLC BookIt! Consumer before 2.2 stores usernames and passwords in plaintext in a cookie, which could allow remote attackers to gain privileges via Cross-site scripting or sniffing attacks.