CVE-2018-5073

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Online Ticket Booking has CSRF via admin/movieedit.php.

Metrics

CVSS 3.0 6.8/10CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-352

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jan 3, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-50744.8Online Ticket Booking has XSS via the admin/manageownerlist.php contact parameter.CVE-2018-50754.8Online Ticket Booking has XSS via the admin/snacks_edit.php snacks_name parameter.CVE-2018-50764.8Online Ticket Booking has XSS via the admin/newsedit.php newstitle parameter.CVE-2018-50774.8Online Ticket Booking has XSS via the admin/movieedit.php moviename parameter.CVE-2018-50784.8Online Ticket Booking has XSS via the admin/eventlist.php cast parameter.CVE-2018-50797.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50807.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50817.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50827.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50837.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50847.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifieCVE-2018-50857.8In K7 AntiVirus 15.1.0306, the driver file (K7FWHlpr.sys) allows local users to cause a denial of service (BSOD) or possibly have unspecifie
CVE-2018-5073: Medium severity, CVSS 6.8 | Vulnix