CVE-2017-17939

High

Published: 28/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

PHP Scripts Mall Single Theater Booking has a CSRF vulnerability via admin/sitesettings.php, which may allow attackers to perform unauthorized actions on behalf of a logged-in administrator.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized changes in system settings, jeopardizing the integrity and security of the application.

Recommendation

It is recommended to implement CSRF tokens in forms and update the software to the latest version to minimize risk.

Other vulnerabilities in PHP Scripts Mall Single Theater Booking

CVE-2017-17941High
PHP Scripts Mall Single Theater Booking has an SQL Injection vulnerability via the movieid parameter in the admin/movieview.php file.

Original NVD description (English source)

PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS