Vulnerabilities > Single Theater Booking Script Project > Single Theater Booking Script > High

DATE	CVE	VULNERABILITY TITLE	RISK
2017-12-28	CVE-2017-17941	SQL Injection vulnerability in Single Theater Booking Script Project Single Theater Booking Script 3.2.2 PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter. network low complexity single-theater-booking-script-project CWE-89	7.2
2017-12-28	CVE-2017-17939	Cross-Site Request Forgery (CSRF) vulnerability in Single Theater Booking Script Project Single Theater Booking Script 3.2.2 PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php. network low complexity single-theater-booking-script-project CWE-352	8.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.