CVE-2017-17941: Improper Neutralization of Special Elements used in an SQL Command

PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...