CVE-2019-7554

An issue was discovered in PHP Scripts Mall API Based Travel Booking 3.4.7. There is Reflected XSS via the flight-results.php d2 parameter.

• CWE-79

• https://securityhitlist.blogspot.com/2019/02/cve-2019-7554-reflected-xss-in-api.htmlExploit, Third Party Advisory
• https://www.phpscriptsmall.comVendor Advisory
• https://securityhitlist.blogspot.com/2019/02/cve-2019-7554-reflected-xss-in-api.htmlExploit, Third Party Advisory
• https://www.phpscriptsmall.comVendor Advisory

Published

Jun 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-7548SQLAlchemy 1.2.17 has SQL Injection when the group_by parame…7.8
• CVE-2019-7549An issue was discovered in GitLab Community and Enterprise E…
• CVE-2019-7550In JForum 2.1.8, an unauthenticated, remote attacker can enu…
• CVE-2019-7551Cantemo Portal before 3.2.13, 3.3.x before 3.3.8, and 3.4.x …9
• CVE-2019-7552An issue was discovered in PHP Scripts Mall Investment MLM S…5.4
• CVE-2019-7553PHP Scripts Mall Chartered Accountant : Auditor Website 2.0.…5.4
• CVE-2019-7559In btor2parser/btor2parser.c in Boolector Btor2Tools before …
• CVE-2019-7560In parser/btorsmt2.c in Boolector 3.0.0, opening a specially…
• CVE-2019-7564An issue was discovered on Shenzhen Coship WM3300 WiFi Route…
• CVE-2019-7566CSZ CMS 1.1.8 has CSRF via admin/users/new/add.
• CVE-2019-7567An issue was discovered in Waimai Super Cms 20150505. admin.…
• CVE-2019-7568An issue was discovered in baijiacms V4 that can result in t…