CVE-2025-0340

CVE-2025-0340 affects code-projects Cinema Seat Reservation System 1.0, impacting the /admin/deleteBooking.php functionality. The root cause is an SQL injection triggered by manipulating the id argument, with the vulnerability exploitable remotely and the exploit publicly disclosed. A range of so...

CVE-2024-25307

CVE-2024-25307 affects Code-projects Cinema Seat Reservation System 1.0: SQL Injection via the id parameter in /Cinema-Reservation/booking.php?id=1. Root cause is unsafe SQL construction that allows attacker-controlled input to influence queries, with reported CVSS v3.1 base metrics of 9.8 (CRITI...