CVE-2018-5073

Online Ticket Booking has CSRF via admin/movieedit.php...

CVE-2018-5077

Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...

Design/Logic Flaw

Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...

Cross site request forgery (csrf)

Online Ticket Booking has CSRF via admin/movieedit.php...

CVE-2018-5073

Online Ticket Booking has CSRF via admin/movieedit.php...

CVE-2018-5073

Online Ticket Booking has CSRF via admin/movieedit.php...

CVE-2018-5077

CVE-2018-5077 is described across multiple sources as an XSS vulnerability in Online Ticket Booking, exploitable via the admin/movieedit.php moviename parameter. The NVD entry lists a network-accessible, low-medium severity issue with CVSS v3.0 base score 4.8 (I/L, C/L) and a CVSS v2 base score 3...

CVE-2018-5073

CVE-2018-5073 affects the Online Ticket Booking system, with a CSRF vulnerability in the admin/movieedit.php endpoint. The issue allows forged requests to be sent on behalf of an authenticated admin, potentially enabling unauthorized actions. The CVE entry lists CVSS metrics (2.0/3.0) indicating ...