CVE:CVE-2006-3049
CNNVD:CNNVD-200606-331
Mole Group Ticket Booking Script中的booking3.php存在多个跨站脚本攻击(XSS) 漏洞。远程攻击者可以借助booking2.php中的(1) name, (2) address1, (3) address2, (4) county, (5) postcode, (6) email, (7) phone或(8) mobile参数，注入任意Web脚本或HTML。
solution:Upgrade mole_group_ticket_booking_script mole_group_ticket_booking_script to a higher version than *