CVE-2023-44167: SQL Injection
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Other sources
The 'name' parameter of the processregistration.php resource
does not validate the characters received and they
are sent unfiltered to the database.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-44167?
CVE-2023-44167 is a vulnerability in the 'name' parameter of the process_registration.php resource of Projectworlds Online Movie Ticket Booking System that allows unfiltered characters to be sent to the database.
How does CVE-2023-44167 affect Projectworlds Online Movie Ticket Booking System?
CVE-2023-44167 affects Projectworlds Online Movie Ticket Booking System by not properly validating characters in the 'name' parameter, which can lead to unfiltered data being sent to the database.
What is the severity of CVE-2023-44167?
CVE-2023-44167 has a severity rating of critical with a score of 9.8.
How can I fix CVE-2023-44167?
To fix CVE-2023-44167, it is recommended to implement proper character validation for the 'name' parameter in the process_registration.php resource of Projectworlds Online Movie Ticket Booking System.
Where can I find more information about CVE-2023-44167?
More information about CVE-2023-44167 can be found at the following links: [Fluid Attacks Advisory](https://fluidattacks.com/advisories/starr) and [Projectworlds](https://projectworlds.in/).