Critical · 9.8 CVE-2023-44164 EUVD-2023-48523GHSA-xr9c-w7f8-3p75

Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Published Sep 28, 2023 · Updated Sep 23, 2024 · Assigned by Fluid Attacks

Description

The 'Email' parameter of the process_login.php resource

does not validate the characters received and they

are sent unfiltered to the database.

Vendor	Product	Affected	Fixed
Online Movie Ticket Booking System	Online Movie Ticket Booking System	1.0	—