12 matches found
CVE-2018-5073
Online Ticket Booking has CSRF via admin/movieedit.php...
Cross site request forgery (csrf)
Online Ticket Booking has CSRF via admin/movieedit.php...
Design/Logic Flaw
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...
CVE-2018-5077
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...
CVE-2018-5073
Online Ticket Booking has CSRF via admin/movieedit.php...
CVE-2018-5077
CVE-2018-5077 is described across multiple sources as an XSS vulnerability in Online Ticket Booking, exploitable via the admin/movieedit.php moviename parameter. The NVD entry lists a network-accessible, low-medium severity issue with CVSS v3.0 base score 4.8 (I/L, C/L) and a CVSS v2 base score 3...
CVE-2018-5073
Online Ticket Booking has CSRF via admin/movieedit.php...
CVE-2018-5073
CVE-2018-5073 affects the Online Ticket Booking system, with a CSRF vulnerability in the admin/movieedit.php endpoint. The issue allows forged requests to be sent on behalf of an authenticated admin, potentially enabling unauthorized actions. The CVE entry lists CVSS metrics (2.0/3.0) indicating ...
PT-2018-16765
Name of the Vulnerable Software and Affected Versions Online Ticket Booking affected versions not specified Description The issue is related to a CSRF problem. It affects the admin/movieedit.php endpoint. Recommendations At the moment, there is no information about a newer version that contains a...
CVE-2018-5077: Improper Neutralization of Input During Web Page Generation
Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter...
CVE-2018-5073: Cross-Site Request Forgery (CSRF)
Online Ticket Booking has CSRF via admin/movieedit.php...
PT-2018-16769
Name of the Vulnerable Software and Affected Versions Online Ticket Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to the lack of proper input validation in the moviename parameter of...