Single Theater Booking Script Project Single Theater Booking Script — known CVE vulnerabilities

Every CVE whose affected-product data names Single Theater Booking Script Project Single Theater Booking Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2017-17634 — CVSS 9.8 (critical): Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.
• CVE-2017-17939 — CVSS 8.8 (high): PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
• CVE-2017-17941 — CVSS 7.2 (high): PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
• CVE-2017-17938 — CVSS 4.8 (medium): PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.
• CVE-2017-17940 — CVSS 4.8 (medium): PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.