Online Movie Booking
1 CVEs
product
Monthly
The online-movie-booking application (v5.5) by gosaliajainam contains SQL injection in movie_details.php, allowing unauthenticated attackers to extract the entire database. PoC exists. This is an open-source educational project often deployed without hardening.
PHP
SQLi
Online Movie Booking
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.0%
CVE-2025-65125
EPSS 0%
CVSS 9.8
CRITICAL
POC
Act Now
The online-movie-booking application (v5.5) by gosaliajainam contains SQL injection in movie_details.php, allowing unauthenticated attackers to extract the entire database. PoC exists. This is an open-source educational project often deployed without hardening.
PHP
SQLi
Online Movie Booking
NVD
GitHub