CVE-2008-6215: Bookingcentre Booking System For Hotels Group

Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in cadena_ofertas_ext.php in Venalsur Booking Centre Booking System for Hotels Group allows remote attackers to inject arbitrary web script or HTML via the OfertaID parameter.

Affected products

• Bookingcentre Booking System For Hotels Group: affected versions not specified

Published 2009-02-20. Last modified 2026-06-16.