Design/Logic Flaw

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter...

Design/Logic Flaw

Online Ticket Booking has XSS via the admin/snacksedit.php snacksname parameter...

Design/Logic Flaw

Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...

Design/Logic Flaw

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

CVE-2018-5072

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter...

CVE-2018-5073

Online Ticket Booking has CSRF via admin/movieedit.php...

CVE-2018-5074

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter...

CVE-2018-5076

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter...

Cross site request forgery (csrf)

Online Ticket Booking has CSRF via admin/movieedit.php...

Code injection

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter...

CVE-2018-5078

Online Ticket Booking has XSS via the admin/eventlist.php cast parameter...

Design/Logic Flaw

Online Ticket Booking has XSS via the admin/eventlist.php cast parameter...

CVE-2018-5075

Online Ticket Booking has XSS via the admin/snacksedit.php snacksname parameter...

CVE-2018-5077

Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...

CVE-2018-5074

CVE-2018-5074 is described across sources as an XSS vulnerability in Online Ticket Booking, exploitable via the admin/manageownerlist.php contact parameter. Multiple documents (NVD, Red Hat, CVE lists) corroborate the description. The NVD entry lists two CVSS vectors: CVSSv2 base score 3.5 (LOW) ...

CVE-2018-5072

CVE-2018-5072 describes a Cross-Site Scripting (XSS) vulnerability in Online Ticket Booking, exploitable via the admin/sitesettings.php keyword parameter. Multiple connected records confirm the issue and describe the impact as XSS, with CVSS scores from NVD indicating low–medium severity (base sc...

CVE-2018-5074

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter...

CVE-2018-5076

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter...

CVE-2018-5075

Online Ticket Booking has XSS via the admin/snacksedit.php snacksname parameter...

CVE-2018-5075

CVE-2018-5075 specifies an XSS vulnerability in Online Ticket Booking, exploitable via the admin/snacks_edit.php snacks_name parameter. The available connected documents confirm the affected application path and vulnerability class (XSS) but do not provide exploit code, affected versions, remedia...