CVE-2022-4248: Movie Ticket Booking System editBooking.php sql injection
First published: Thu Dec 01 2022(Updated: )
A vulnerability, which was classified as critical, has been found in Movie Ticket Booking System. This issue affects some unknown processing of the file editBooking.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-214625 was assigned to this vulnerability.
Credit: cna@vuldb.com cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Movie Ticket Booking System |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-4248?
CVE-2022-4248 is a critical vulnerability found in the Movie Ticket Booking System that allows remote SQL injection attacks through the editBooking.php file.
How severe is CVE-2022-4248?
CVE-2022-4248 has a severity score of 9.8, classified as critical.
What software is affected by CVE-2022-4248?
The vulnerability affects the Movie Ticket Booking System Project's Movie Ticket Booking System.
How can a remote SQL injection attack be initiated?
A remote SQL injection attack can be initiated through the manipulation of the 'id' argument in the editBooking.php file.
Are there any references related to CVE-2022-4248?
Yes, you can find references related to CVE-2022-4248 at the following links: [GitHub](https://github.com/aman05382/movie_ticket_booking_system_php/issues/3) and [VulDB](https://vuldb.com/?id.214625).
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/title
- agent/description
- agent/first-publish-date
- agent/last-modified-date
- agent/author
- agent/softwarecombine
- agent/event
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/movie ticket booking system project
- canonical/movie ticket booking system