CVE-2018-5073

Online Ticket Booking has CSRF via admin/movieedit.php...

CVE-2018-5073

Online Ticket Booking has CSRF via admin/movieedit.php...

CVE-2018-5073: Cross-Site Request Forgery (CSRF)

Online Ticket Booking has CSRF via admin/movieedit.php...

CVE-2018-5077: Improper Neutralization of Input During Web Page Generation

Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...

PT-2018-16765

Name of the Vulnerable Software and Affected Versions Online Ticket Booking affected versions not specified Description The issue is related to a CSRF problem. It affects the admin/movieedit.php endpoint. Recommendations At the moment, there is no information about a newer version that contains a...

PT-2018-16769

Name of the Vulnerable Software and Affected Versions Online Ticket Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to the lack of proper input validation in the moviename parameter of...