Projectworlds Online Movie Ticket Booking System vulnerabilities

6 CVEs affecting Projectworlds Online Movie Ticket Booking System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-44174, published 2023-09-28.

More from Projectworlds.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2021-44866, published 2022-02-03. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to…
• CVE-2023-44166, published 2023-09-28. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database.
• CVE-2023-44164, published 2023-09-28. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database.
• CVE-2023-44163, published 2023-09-28. Critical severity, CVSS 9.8. EPSS: 1% chance of exploitation in the next 30 days. The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database.
• CVE-2023-44174, published 2023-09-28. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability.
• CVE-2023-44173, published 2023-09-28. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability.