CVE-2023-44168: SQL Injection
Published Sep 28, 2023
·Updated
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Other sources
The 'phone' parameter of the processregistration.php resource
does not validate the characters received and they
are sent unfiltered to the database.
Affected Software
1 affected component
Projectworlds Online Movie Ticket Booking System=1.0
Event History
Sep 28, 2023
CVE Published
09:55 PM
Rejected
09:55 PM
Data Sourced
via NVD·10:15 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-44168.
2
What is the severity of CVE-2023-44168?
CVE-2023-44168 has a severity level of critical.
3
What is the affected software?
The affected software is Projectworlds Online Movie Ticket Booking System version 1.0.
4
What is the Common Weakness Enumeration (CWE) ID associated with CVE-2023-44168?
The CWE ID associated with CVE-2023-44168 is CWE-89.
5
What is the potential impact of CVE-2023-44168?
CVE-2023-44168 allows attackers to send unfiltered characters to the database through the 'phone' parameter of the process_registration.php resource, potentially leading to unauthorized access or data manipulation.