A vulnerability classified as critical was found in Movie Ticket Booking System. This vulnerability affects unknown code of the file booking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214624.
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
Link | Tags |
---|---|
https://github.com/aman05382/movie_ticket_booking_system_php/issues/1 | issue tracking exploit third party advisory |
https://vuldb.com/?id.214624 | third party advisory |