CVE-2023-44168

02 Jan 2024, 22:15

Type	Values Removed	Values Added
Summary	The 'phone' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database.	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVSS	v2 : unknown v3 : 9.8	v2 : unknown v3 : unknown
CPE	cpe:2.3:a:projectworlds:online_movie_ticket_booking_system:1.0:*:*:*:*:*:*:*
References	{'url': 'https://fluidattacks.com/advisories/starr', 'name': 'https://fluidattacks.com/advisories/starr', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'} {'url': 'https://projectworlds.in/', 'name': 'https://projectworlds.in/', 'tags': ['Product'], 'refsource': 'MISC'}
CWE	CWE-89

---

30 Sep 2023, 02:16

Type	Values Removed	Values Added
CPE		cpe:2.3:a:projectworlds:online_movie_ticket_booking_system:1.0:*:*:*:*:*:*:*
CVSS	v2 : unknown v3 : unknown	v2 : unknown v3 : 9.8
First Time		Projectworlds Projectworlds online Movie Ticket Booking System
CWE		CWE-89
References	(MISC) https://fluidattacks.com/advisories/starr -	(MISC) https://fluidattacks.com/advisories/starr - Exploit, Third Party Advisory
References	(MISC) https://projectworlds.in/ -	(MISC) https://projectworlds.in/ - Product

---

28 Sep 2023, 22:15

Type	Values Removed	Values Added
New CVE

---