CVE-2017-17633

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Multiplex Movie Theater Booking Script version 3.1.5 has an SQL Injection vulnerability via the moid parameter in trailer-detail.php, moid parameter in show-time.php, or eid parameter in event-detail.php.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the script to the latest version and implement input filtering and validation to minimize the risk of SQL Injection attacks.

Original NVD description (English source)

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter.