CVE-2018-5072

Online Ticket Booking has XSS via the admin/sitesettings.php keyword parameter.

CVE-2018-5074

Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.

CVE-2018-5075

Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.

CVE-2018-5076

Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.

CVE-2018-5077

Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.

CVE-2018-5073

Online Ticket Booking has CSRF via admin/movieedit.php.

CVE-2018-5078

Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.