CVE-2023-44174

CVE-2023-44174 affects the Online Movie Ticket Booking System v1.0. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) in the web application’s input handling, allowing malicious scripts to be stored and executed in the context of other authenticated users. According to the a...

CVE-2023-44163

CVE-2023-44163 describes a SQL Injection risk in a web application where the search parameter of the process_search.php resource does not validate received characters, sending them unfiltered to the database. The issue enables unauthenticated access with potential impact to confidentiality, integ...

CVE-2023-44164

CVE-2023-44164 involves the Email parameter of process_login.php in Online Movie Ticket Booking System v1.0. The input is not validated and is sent unfiltered to the database, described as an unauthenticated SQL injection risk in multiple sources. Affected product details indicate Projectworlds O...

CVE-2023-44166

The CVE concerns Projectworlds Online Movie Ticket Booking System v1.0, where the age parameter of process_registration.php does not validate input and sends characters unfiltered to the database, enabling SQL injection. Reported details indicate a high-severity impact affecting confidentiality, ...

CVE-2023-44173

The CVE-2023-44173 entry concerns Online Movie Ticket Booking System v1.0 and describes an authenticated Reflected Cross-Site Scripting vulnerability. The connected documents corroborate an XSS issue triggered by authenticated user input reflected by the application, affecting the web-facing comp...

CVE-2021-44866

CVE-2021-44866 affects Online-Movie-Ticket-Booking-System 1.0. The about.php file does not validate the 'id' parameter, allowing an attacker to append SQL queries to extract sensitive information from the database. This is documented in the NVD entry and corroborated by related records. No exploi...