CVE-2025-65125

Critical

Published: 02/01/2026(UTC)Translated: 05/08/2026(UTC)NVD NIST

Summary

SQL injection vulnerability in online-movie-booking in movie_details.php allows attackers to gain sensitive information.

An attacker can steal database data, including user data and credentials.

Update the application to the latest version and use parameterized SQL queries.

Original NVD description (English source)

SQL injection in gosaliajainam/online-movie-booking 5.5 in movie_details.php allows attackers to gain sensitive information.