External risk intelligence

SQL Injection in gosaliajainam online-movie-booking 5.5 Allows Sensitive Information Disclosure

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2025-65125

The vulnerability exists in a movie booking application, which is a type of web application typically deployed to be internet-facing to allow users to access services, search for content, and make reservations.

SQL Injection

Gosaliajainam Online Movie Booking

5.5

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

This advisory addresses a critical security vulnerability found in the online movie booking application. The issue, a type of SQL injection, could allow unauthorized access to sensitive information within the system. The primary concern is to confirm if this specific application and version are in use within our environment and to understand the potential exposure.

Unauthorized access to sensitive data.
Confirms potential use of vulnerable software.
Assess impact and determine relevance.

Attack Path

How an attacker could exploit the issue

An attacker can exploit this vulnerability by sending specially crafted input to the `movie_details.php` script. This script is part of the online movie booking application and appears to be accessible over the network. By manipulating input parameters, an attacker could trigger a SQL injection, potentially leading to the disclosure of sensitive information.

Network access required.
Vulnerable `movie_details.php` script.
Sensitive information disclosure risk.

Live Threat

Current exploitation, exposure, and threat context

SQL injection in this movie booking application could allow an unauthenticated attacker to access sensitive information from the system. This could occur when a specially crafted request is sent to the movie details functionality.

Sensitive movie and system data could be exposed.
An attacker could send a malicious request.
Unauthorized access to application data.

Operational Fix

Recommended remediation, mitigation, and detection steps

This SQL injection vulnerability in the `gosaliajainam/online-movie-booking` application, specifically in `movie_details.php`, requires immediate attention from the application owner and potentially the platform or infrastructure teams responsible for its deployment. The first practical step is to identify all instances of this application, determine their exposure and business criticality, and confirm the accountable owner for remediation.

Application owners should assume responsibility.
Verify application reachability and criticality first.
Coordinate vendor support for timely fixes.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is the gosaliajainam online-movie-booking software?

This software is a web-based application designed to manage cinema listings, user reservations, and movie information. It is typically deployed as a platform where users browse films and handle bookings online, functioning like a digital storefront for a movie theater or ticketing service.

What does CVE-2025-65125 mean for security?

This vulnerability is classified as CWE-89, or SQL Injection. It occurs when an application fails to properly sanitize user-supplied data before including it in a database query. In this case, an attacker can manipulate input to interfere with the application's database, potentially allowing them to view, modify, or delete sensitive information.

How is the SQL injection in movie_details.php triggered?

The flaw is triggered when an attacker sends a specially crafted request to the movie_details.php script. The vulnerability relies on the application accepting malicious input via parameters in this file. It is not triggered by standard, legitimate user interactions that do not include manipulative code designed to subvert database commands.

Why is this a concern for my network security?

According to Halo Surface Signal, this vulnerability is considered a likely risk because movie booking applications are typically hosted on internet-facing web servers to enable public access. Because the application is designed to be reachable by external users to browse content, the attack surface is generally broad, increasing the probability of unauthorized access.

What should I do if I am running this application?

Your first step is to locate all instances of this software within your environment. Once identified, evaluate the business criticality of the service and confirm who is responsible for its maintenance. Work with your team to determine the system's exposure level and coordinate with the vendor or developers to obtain and apply the necessary security updates.

References

github.com/TheAnhaj/CVE-Researches

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.