Cinema Booking System Security Vulnerabilities and Issues — Cinema Booking System CVE List

Lucene search

PhpjabbersCinema Booking System

3 matches found

CVE•added 2025/02/06 5:15 p.m.•40 views

CVE-2024-57429

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request.

5.4CVSS7.4AI score0.00177EPSS

CVE•added 2025/02/20 4:15 p.m.•39 views

CVE-2023-51330

PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Now Showing menu "date" parameter.

5.4CVSS5.3AI score0.00079EPSS

CVE•added 2025/02/20 6:15 p.m.•36 views

CVE-2023-51334

A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail messages.

5.3CVSS5.2AI score0.00195EPSS