« Back to list

Projectworlds

Projectworlds Online Movie Ticket Booking System: vulnerabilities and CVEs

Projectworlds Online Movie Ticket Booking System has 6 published vulnerabilities, 0 of them in the last 12 months. 3 are rated critical and 0 are listed by CISA as actively exploited.

CVEs6
Last 12 months0
Critical3
Actively exploited0

All vulnerabilities in the catalogue →⭐ Follow this technology

Latest vulnerabilities

CVESeverityEPSSActive exploitationPublishedDescription
CVE-2023-44174Medium (5.4)0.41%—Sep 28, 2023
Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability.
CVE-2023-44166Critical (9.8)0.98%—Sep 28, 2023
The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-44164Critical (9.8)0.98%—Sep 28, 2023
The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-44163Critical (9.8)0.98%—Sep 28, 2023
The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database.
CVE-2023-44173Medium (5.4)0.40%—Sep 28, 2023
Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability.
CVE-2021-44866High (7.5)1.0%—Feb 3, 2022
An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive…

Other products by Projectworlds