Projectworlds Online Movie Ticket Booking System vulnerabilities
6 vulnerabilities
Known vulnerabilities in Projectworlds Online Movie Ticket Booking System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-44866projectworldsonline_movie_ticket_booking_system
EPSS score1.00%
An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database.CVE-2023-44163online movie ticket booking systemonline movie ticket booking system+1EPSS score0.98%
The 'search' parameter of the process_search.php resource
does not validate the characters received and they
are sent unfiltered to the database.CVE-2023-44173online movie ticket booking systemonline movie ticket booking system+1EPSS score0.40%
Online Movie Ticket Booking System v1.0 is vulnerable to
an authenticated Reflected Cross-Site Scripting vulnerability.CVE-2023-44174online movie ticket booking systemonline movie ticket booking system+1EPSS score0.41%
Online Movie Ticket Booking System v1.0 is vulnerable to
an authenticated Stored Cross-Site Scripting vulnerability.CVE-2023-44164online movie ticket booking systemonline movie ticket booking system+1EPSS score0.98%
The 'Email' parameter of the process_login.php resource
does not validate the characters received and they
are sent unfiltered to the database.CVE-2023-44166online movie ticket booking systemonline movie ticket booking system+1EPSS score0.98%
The 'age' parameter of the process_registration.php resource
does not validate the characters received and they
are sent unfiltered to the database.