CVE-2018-5078

Name of the Vulnerable Software and Affected Versions Online Ticket Booking (affected versions not specified)

Description The issue is related to a security problem where an attacker can inject malicious code. Specifically, it involves the cast parameter in the "admin/eventlist.php" API endpoint.

Recommendations For all affected versions, consider restricting access to the cast parameter in the "admin/eventlist.php" endpoint until a patch is available. As a temporary workaround, avoid using the cast parameter in the affected API endpoint until the issue is resolved.