CVE-2018-0513

Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

• CWE-79

• http://mtssb.mt-systems.jp/jvn99312352/Patch, Vendor Advisory
• https://jvn.jp/en/jp/JVN99312352/index.htmlThird Party Advisory
• http://mtssb.mt-systems.jp/jvn99312352/Patch, Vendor Advisory
• https://jvn.jp/en/jp/JVN99312352/index.htmlThird Party Advisory

Published

Feb 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-0507Untrusted search path vulnerability in FLET'S VIRUS CLEAR Ea…
• CVE-2018-0508Cross-site scripting vulnerability in epg search result view…
• CVE-2018-0509Cross-site request forgery (CSRF) vulnerability in epg searc…
• CVE-2018-0510Buffer overflow in epg search result viewer (kkcald) 0.7.19 …
• CVE-2018-0511Cross-site scripting vulnerability in WP Retina 2x prior to …
• CVE-2018-0512Devices with IP address setting tool "MagicalFinder" provide…
• CVE-2018-0514MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier al…
• CVE-2018-0515Untrusted search path vulnerability in "FLET'S Azukeru Backu…
• CVE-2018-0516Untrusted search path vulnerability in FLET'S v4 / v6 addres…
• CVE-2018-0517Untrusted search path vulnerability in Anshin net security f…
• CVE-2018-0518LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 ce…
• CVE-2018-0519Cross-site scripting vulnerability in FS010W firmware FS010W…