CVE-2017-17595

Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter...

CVE-2017-17595

The CVE concerns Beauty Parlour Booking Script 1.0 (PHP Scripts Mall India) with a SQL injection in the /list endpoint, exploited via the gender or city parameter. The CNVD entry confirms a remote SQL injection vulnerability affecting version 1.0, allowing injection of SQL commands through the li...

CVE-2017-17595: Improper Neutralization of Special Elements used in an SQL Command

Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter...

Beauty Parlour Booking Script 1.0 - 'gender' / 'city' SQL Injection

Exploit Title: Beauty Parlour Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/beauty-booking-script/ Demo: http://fxwebsolution.com/demo/beautyparlour-search/ Version: 1.0 Category...