Single Theater Booking Script Project

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Single Theater Booking Script Project records in CISA KEV

No Single Theater Booking Script Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records in Single Theater Booking Script · all components

TI-2017-12905 CVE-2017-17634 · GHSA-q2hx-r25g-rc9x

MEDIUM 46

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02204 Published 2017-12-13 No fix listed CWE-89

TI-2017-13164 CVE-2017-17939 · GHSA-7rj9-5523-cf4g

LOW 38

PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00456 Published 2017-12-28 No fix listed CWE-352

TI-2017-13166 CVE-2017-17941 · GHSA-fjgh-m43j-xwpc

LOW 33

PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.00937 Published 2017-12-28 No fix listed CWE-89

TI-2017-13165 CVE-2017-17940 · GHSA-6cmp-vqhj-484p

LOW 23

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00492 Published 2017-12-28 No fix listed CWE-79

TI-2017-13163 CVE-2017-17938 · GHSA-v53x-4vjx-3w58

LOW 23

PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00492 Published 2017-12-28 No fix listed CWE-79