CVE-2024-57429

MEDIUM

PHPJabbers Cinema Booking System 2.0 - Cross-Site Request Forgery in pjActionUpdate

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2024-57429. PoCs published by ahrixia.

AI-analyzed exploit summary This repository contains a functional CSRF PoC for CVE-2024-57429, targeting PHPJabbers Cinema Booking System v2.0. The exploit demonstrates privilege escalation by tricking an admin into submitting a malicious request that updates user details.

Description

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request.

Exploits (1)

nomisec WORKING POC
by ahrixia · poc
https://github.com/ahrixia/CVE-2024-57429

This repository contains a functional CSRF PoC for CVE-2024-57429, targeting PHPJabbers Cinema Booking System v2.0. The exploit demonstrates privilege escalation by tricking an admin into submitting a malicious request that updates user details.

Classification
Working Poc 95%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: PHPJabbers Cinema Booking System v2.0
Auth required
Prerequisites: Admin user must be authenticated and tricked into visiting the malicious page
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 5.4
EPSS 0.0026
EPSS Percentile 17.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-352
Status published
Products (1)
phpjabbers/cinema_booking_system 2.0
Published Feb 06, 2025
Tracked Since Feb 18, 2026