CVE-2022-4250

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Movie Ticket Booking System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file booking.php. The manipulation of the argument id leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214627.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-707

Affected software

No affected versions have been published.

Timeline

Published
Dec 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-425006.7In OEM_OnRequest of sced.cpp, there is a possible shell command execution due to improper input validation. This could lead to local escalatCVE-2022-425016.7In HexString2Value of util.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation oCVE-2022-425026.7In FacilityLock::Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalCVE-2022-425036.7In ProtocolMiscBuilder::BuildSetLinkCapaReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to a missing CVE-2022-425046.7In CallDialReqData::encodeCallNumber of callreqdata.cpp, there is a possible out of bounds write due to an incorrect bounds check. This coulCVE-2022-425056.7In ProtocolMiscBuilder::BuildSetSignalReportCriteria of protocolmiscbuilder.cpp, there is a possible out of bounds write due to an incorrectCVE-2022-425066.7In SimUpdatePbEntry::encode of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local CVE-2022-425076.7In ProtocolSimBuilder::BuildSimUpdatePb3gEntry of protocolsimbuilder.cpp, there is a possible out of bounds write due to a missing bounds chCVE-2022-425086.7In ProtocolCallBuilder::BuildSendUssd of protocolcallbuilder.cpp, there is a possible out of bounds write due to a missing bounds check. ThiCVE-2022-425096.7In CallDialReqData::encode of callreqdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to locCVE-2022-42515.4A vulnerability was found in Movie Ticket Booking System and classified as problematic. Affected by this issue is some unknown functionalityCVE-2022-425106.7In StringsRequestData::encode of requestdata.cpp, there is a possible out of bounds read due to improper input validation. This could lead t
CVE-2022-4250: Medium severity, CVSS 6.1 | Vulnix