CVE-2023-44173

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability...

Cross site scripting

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability...

CVE-2023-44174 Online Movie Ticket Booking System v1.0 - Stored Cross-Site Scripting (XSS)

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability...

CVE-2023-44174

CVE-2023-44174 affects the Online Movie Ticket Booking System v1.0. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) in the web application’s input handling, allowing malicious scripts to be stored and executed in the context of other authenticated users. According to the a...

CVE-2023-44173

The CVE-2023-44173 entry concerns Online Movie Ticket Booking System v1.0 and describes an authenticated Reflected Cross-Site Scripting vulnerability. The connected documents corroborate an XSS issue triggered by authenticated user input reflected by the application, affecting the web-facing comp...

CVE-2023-44173 Online Movie Ticket Booking System v1.0 - Reflected Cross-Site Scripting (XSS)

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability...

CVE-2023-44173 Online Movie Ticket Booking System v1.0 - Reflected Cross-Site Scripting (XSS)

Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability...

Number withdrawn

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. This CVE number has been withdrawn...

PT-2023-29145 · Unknown · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: Online Movie Ticket Booking System version 1.0 Description: The Online Movie Ticket Booking System is affected by an authenticated Stored Cross-Site Scripting issue. This allows attackers to inject malicious scripts into the system, potential...

PT-2023-29133 · Online Movie Ticket Booking System +1 · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: process search.php affected versions not specified Description: The issue is related to the 'search' parameter of the process search.php resource, which does not validate the characters received. As a result, these characters are sent...

Projectworlds Online Movie Ticket Booking System Cross-Site Scripting Vulnerability

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. Projectworlds Online Movie Ticket Booking System v1.0 suffers from a cross-site scripting vulnerability that stems from susceptibility to an authenticated stored cross-site scriptin...

Projectworlds Online Movie Ticket Booking System SQL Injection Vulnerability

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. Projectworlds Online Movie Ticket Booking System v1.0 suffers from a SQL injection vulnerability that originates from characters that are not validated as received and are sent to t...

Number withdrawn

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. This CVE number has been withdrawn...

Projectworlds Online Movie Ticket Booking System SQL Injection Vulnerability

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. Projectworlds Online Movie Ticket Booking System v1.0 suffers from a SQL injection vulnerability that originates from characters that are not validated as received and are sent to t...

Number withdrawn

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. This CVE number has been withdrawn...

Projectworlds Online Movie Ticket Booking System SQL Injection Vulnerability

Projectworlds Online Movie Ticket Booking System is an online movie ticket booking system from Projectworlds India. A SQL injection vulnerability exists in Online Movie Ticket Booking System v1.0, which originates from characters that are not validated as received and are sent to the database...

WordPress Checkfront Online Booking System Plugin <= 3.6 is vulnerable to Cross Site Request Forgery (CSRF)

Software Checkfront Online Booking System Type Plugin Vulnerable versions = 3.6 Fixed in 3.7 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-44146 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 4851b589bde2 Credits BuShiY...

CVE-2023-2705 Appointment booking addon for Gravity Forms < 1.10.0 - Reflected Cross-Site Scripting

The gAppointments WordPress plugin before 1.10.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against admin...

Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS

Description The plugin does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators As an unauthenticated user, submit a booking form such form can be added via the Booking Calendar Block on a...

Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS

Description The plugin does not sanitize and escape some of its booking from data, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against administrators PoC As an unauthenticated user, submit a booking form such form can be added via the Booking Calendar Block on a...