27 matches found
CVE-2025-67963
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...
CVE-2025-67963
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...
CVE-2025-67963 WordPress Movie Booking plugin <= 1.1.5 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...
CVE-2025-67963
CVE-2025-67963 refers to the WordPress plugin Movie Booking (ovatheme Movie Booking) , affected up to version 1.1.5 . The incident is described as an unauthenticated, high-severity path traversal/arbitrary file deletion vulnerability that could enable deletion of arbitrary files on affected sites...
CVE-2025-67963 WordPress Movie Booking plugin <= 1.1.5 - Arbitrary File Deletion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...
CVE-2025-67963
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...
CVE-2025-67963: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...
WordPress Plugin Movie Booking: Path traversal vulnerability
WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions...
PT-2026-4042
Name of the Vulnerable Software and Affected Versions ovatheme Movie Booking versions through 1.1.5 Description A Path Traversal issue exists in ovatheme Movie Booking movie-booking. This allows an attacker to potentially access files and directories outside of the intended restricted directory...
WordPress Movie Booking plugin <= 1.1.5 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Phat RiO - BlueRock in WordPress Plugin Movie Booking versions = 1.1.5...
CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
online-movie-booking 安全漏洞
online-movie-booking is a university learning website by the individual developer gosaliajainam. A security vulnerability exists in online-movie-booking version 5.5, which stems from an SQL injection in the moviedetails.php file, which could lead to the disclosure of sensitive information...
PT-2026-1091
Name of the Vulnerable Software and Affected Versions gosaliajainam/online-movie-booking version 5.5 Description A SQL injection issue exists in the movie details.php file of the Online Movie Booking Application. This allows attackers to potentially gain sensitive information. The issue is presen...
CVE-2025-65125
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
CVE-2025-65125
The gosaliajainam/online-movie-booking application, version 5.5 , is vulnerable to SQL injection in the movie_details.php file. This security flaw, associated with CWE-89 , allows an attacker to gain access to sensitive information . While a proof-of-concept was published on Telegram in early 202...
CVE-2025-65125: Improper Neutralization of Special Elements used in an SQL Command
SQL injection in gosaliajainam/online-movie-booking 5.5 in moviedetails.php allows attackers to gain sensitive information...
