Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Description

Online Movie Ticket Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

Vulnerabilities

CVE-2023-44163

The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database. The vulnerable code is:

<?php include('header.php');
extract($_POST);
?>
</div>
<div class="content">
 <?php print_r($rs);?>
 <div class="wrap">
 <div class="content-top">
 <h3>Movies</h3>

CVE-2023-44164

The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database. The relevant vulnerable code is:

CVE-2023-44166

The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database. The relevant vulnerable code is:

Our security policy

We have reserved the IDs CVE-2023-44163, CVE-2023-44164 and CVE-2023-44166 to refer to these issues from now on. Disclosure policy

System Information

• Version: Online Movie Ticket Booking System v1.0

• Operating System: Any

Mitigation

There is currently no patch available for this vulnerability.

References

• Vendor page https://projectworlds.in/