CVE-2022-4247 - Movie Ticket Booking System booking.php sql injection

Back Back to CVE browser

CRITICAL

Movie Ticket Booking System booking.php sql injection

Published Dec 1, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.53%

Description

A vulnerability classified as critical was found in Movie Ticket Booking System. This vulnerability affects unknown code of the file booking.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-214624.

Affected products

Vendor n/a Product Movie Ticket Booking System Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Movie Ticket Booking System

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-707

References (2)

https://github.com/aman05382/movie_ticket_booking_system_php/issues/1
ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.214624
Third Party Advisory

Link	Providers	Tags
https://github.com/aman05382/movie_ticket_booking_system_php/issues/1		ExploitIssue TrackingThird Party Advisory
https://vuldb.com/?id.214624		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Dec 1, 2022

Updated Apr 15, 2025

Reserved Dec 1, 2022

Link CVE-2022-4247

CISA Vulnrichment

Updated Apr 14, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-4247

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-4247