PatchTheCVEcinema booking system vulnerabilities and fixes
Recent CVEs affecting cinema booking system, with upgrade or downgrade steps. 8 tracked.
Also searched as: cinemabookingsystem.
cinema booking system has 8 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-02-20. Highest priority: CVE-2024-57430 (score 59/100).
- CVE-2024-57430 CRITICAL 9.8 DOWNGRADE An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows
- CVE-2024-57429 MEDIUM 5.4 DOWNGRADE A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking
- CVE-2024-57428 CRITICAL 9.3 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsan
- CVE-2024-57427 MEDIUM 6.1 DOWNGRADE PHPJabbers Cinema Booking System v2.0 is vulnerable to reflected cross-site scripting (XSS)
- CVE-2023-51335 MEDIUM 6.5 DOWNGRADE PHPJabbers Cinema Booking System v1.0 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "titl
- CVE-2023-51334 MEDIUM 5.3 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Cinema Booking System v1.0 allows attac
- CVE-2023-51333 HIGH 8.8 DOWNGRADE PHPJabbers Cinema Booking System v1.0 is vulnerable to CSV Injection vulnerability which allows an attacker to
- CVE-2023-51330 MEDIUM 5.4 DOWNGRADE PHPJabbers Cinema Booking System v1.0 is vulnerable to Reflected Cross-Site Scripting (XSS) in Now Showing men
FAQ
How do I fix cinema booking system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cinema booking system being exploited right now?
None of the tracked cinema booking system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cinema booking system CVE should I patch first?
CVE-2024-57430 currently ranks highest (59/100): An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows.