5 matches found
CVE-2023-44168
This CVE-2023-44168 entry is rejected/not used and does not represent an active vulnerability.
CVE-2023-44167
This CVE ID is rejected/not used and does not represent an active vulnerability entry.
CVE-2023-44166 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
The 'age' parameter of the processregistration.php resource does not validate the characters received and they are sent unfiltered to the database...
CVE-2023-44166
The CVE concerns Projectworlds Online Movie Ticket Booking System v1.0, where the age parameter of process_registration.php does not validate input and sends characters unfiltered to the database, enabling SQL injection. Reported details indicate a high-severity impact affecting confidentiality, ...
CVE-2023-44166: Improper Neutralization of Special Elements used in an SQL Command
The 'age' parameter of the processregistration.php resource does not validate the characters received and they are sent unfiltered to the database...