Cinema Booking System vulnerabilities

3 known vulnerabilities in Cinema Booking System from Phpjabbers. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Cinema Booking System: Improper Neutralization of Formula Elements in a CSV File

  CVE-2023-51333Feb 20, 2025Phpjabbers

  PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Options

• 9.8 Critical severity

  Cinema Booking System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-57430Feb 6, 2025Phpjabbers

  An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege es

• 9.3 Critical severity

  Cinema Booking System: Improper Neutralization of Input During Web Page Generation

  CVE-2024-57428Feb 6, 2025Phpjabbers

  A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (event_img, seat_maps) and seat number configurations (number[new_X] in pjActionCreate). Attackers can inject persi