Marc Castejon

A critical issue has been found in the software, affecting an unknown functionality of the file /show news.php. The manipulation of the `id` argument with a specific input leads to SQL injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

A problematic issue was found in the software, affecting some unknown functionality of the file /movie.php. The manipulation of the argument `f` with the input `<img src=i onerror=prompt(1)>` leads to basic cross site scripting (Reflected). This can be exploited remotely.

A critical issue has been found in the software, affecting the /movie.php file. The manipulation of the `f` argument leads to SQL injection (Union), allowing for remote attacks. The exploit has been publicly disclosed.

A critical issue was discovered, affecting the /artist-display.php file. The `act` argument is vulnerable to SQL injection (Union) attacks, which can be initiated remotely.

A critical issue has been found in the processing of the file /film-rating.php. The manipulation of the argument `v` leads to sql injection, which can result in an error. This issue can be exploited remotely.