CVE-2023-44164

The 'Email' parameter of the processlogin.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-44164 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

The 'Email' parameter of the processlogin.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-44164

CVE-2023-44164 involves the Email parameter of process_login.php in Online Movie Ticket Booking System v1.0. The input is not validated and is sent unfiltered to the database, described as an unauthenticated SQL injection risk in multiple sources. Affected product details indicate Projectworlds O...