CVE-2023-44165: SQL Injection
Published Sep 28, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Other sources
The 'Password' parameter of the processlogin.php resource
does not validate the characters received and they
are sent unfiltered to the database.
Affected Software
1 affected component
Projectworlds Online Movie Ticket Booking System=1.0
Event History
Sep 28, 2023
CVE Published
09:48 PM
Rejected
09:48 PM
Data Sourced
via NVD·10:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-44165.
2
What is the severity of CVE-2023-44165?
CVE-2023-44165 has a severity rating of critical (9.8).
3
What is the affected software for CVE-2023-44165?
The affected software for CVE-2023-44165 is Projectworlds Online Movie Ticket Booking System version 1.0.
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2023-44165?
The CWE ID for CVE-2023-44165 is CWE-89.
5
How can I fix CVE-2023-44165?
To fix CVE-2023-44165, the 'Password' parameter in the process_login.php resource should be properly validated before being sent to the database.