single theater booking script vulnerabilities and fixes

Recent CVEs affecting single theater booking script, with upgrade or downgrade steps. 5 tracked.

Also searched as: singletheaterbookingscript.

single theater booking script has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-28. Highest priority: CVE-2017-17634 (score 65/100).

• CVE-2017-17941 HIGH 7.2 DOWNGRADE PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
• CVE-2017-17940 MEDIUM 4.8 DOWNGRADE PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
• CVE-2017-17939 HIGH 8.8 DOWNGRADE PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
• CVE-2017-17938 MEDIUM 4.8 DOWNGRADE PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.
• CVE-2017-17634 CRITICAL 9.8 DOWNGRADE Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.

FAQ

How do I fix single theater booking script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is single theater booking script being exploited right now?

None of the tracked single theater booking script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which single theater booking script CVE should I patch first?

CVE-2017-17634 currently ranks highest (65/100): Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter..

RSS feed for single theater booking script · ← Back to latest CVEs