What is CVE-2021-44866?

CVE-2021-44866 is a high-severity vulnerability in Projectworlds Online Movie Ticket Booking System, classified under SQL Injection. CVSS score: 7.5/10. Published 2022-02-03.

How severe is CVE-2021-44866?

High severity. CVSS v3 base score is 7.5 out of 10.

SQL Injection in Projectworlds Online Movie Ticket Booking System

CVE-2021-44866

An issue was discovered in Online-Movie-Ticket-Booking-System 1.0. The file about.php does not perform input validation on the 'id' paramter. An attacker can append SQL queries to the input to extract sensitive information from the database.

Vulnerability class: SQL Injection

EPSS: 0.010 (59.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Projectworlds Online_movie_ticket_booking_system — versions 1.0
N/a — versions n/a

Weakness classification (CWE)

CWE-89 — SQL Injection

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2021-44866?: CVE-2021-44866 is a high-severity vulnerability in Projectworlds Online Movie Ticket Booking System, classified under SQL Injection. CVSS score: 7.5/10. Published 2022-02-03.
How severe is CVE-2021-44866?: High severity. CVSS v3 base score is 7.5 out of 10.