Design/Logic Flaw

PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter...

CVE-2017-17941

PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...

CVE-2017-17939

PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php...

CVE-2017-17940

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...

CVE-2017-17939

PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php...

CVE-2017-17941

PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...

CVE-2017-17938

PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter...

Sql injection

PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...

CVE-2017-17940

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...

CVE-2017-17941

CVE-2017-17941 affects the PHP Scripts Mall Single Theater Booking product, with a SQL Injection vulnerability exposed through the admin/movieview.php?movieid parameter. The connected documents consistently describe exploitability leading to disclosure of usernames or sensitive data. No specific ...

CVE-2017-17938

The CVE-2017-17938 vulnerability affects PHP Scripts Mall Single Theater Booking. The issue is a cross-site scripting (XSS) flaw exploitable through the admin/viewtheatre.php theatreid parameter, likely allowing an attacker to inject arbitrary script via this input. The connected sources consiste...

CVE-2017-17938

PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter...

CVE-2017-17940

PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...

CVE-2017-17940

CVE-2017-17940 concerns PHP Scripts Mall Single Theater Booking. The issue is a cross-site scripting (XSS) vulnerability in the admin/sitesettings.php page caused by unsafely handling the title parameter. The exploit path is user-controlled input reflected in the title field, enabling an attacker...

CVE-2017-17939

PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php...

CVE-2017-17939

The CVE-2017-17939 entry relates to PHP Scripts Mall Single Theater Booking and describes a Cross-Site Request Forgery (CSRF) vulnerability in the admin/sitesettings.php page. The affected software/component is PHP Scripts Mall Single Theater Booking; the underlying issue is CSRF that allows an a...

PHP Scripts Mall Single Theater Booking Cross-Site Scripting Vulnerability

PHP Scripts Mall Single Theater Booking is an open source theater script. A cross-site scripting vulnerability exists in PHP Scripts Mall Single Theater Booking. A remote attacker can inject arbitrary web script or HTML by sending the 'theaterid' parameter to the admin/viewtheatre.php file...

PHP Scripts Mall Single Theater Booking Cross-Site Scripting Vulnerability (CNVD-2018-00498)

PHP Scripts Mall Single Theater Booking is an open source theater script. A cross-site scripting vulnerability exists in PHP Scripts Mall Single Theater Booking. A remote attacker can inject arbitrary web script or HTML by sending the 'title' parameter to the admin/sitesettings.php file...

Bus Booking Script admin/new_master.php file cross-site request forgery vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Bus Booking Script. A remote attacker can exploit this vulnerability to perform unauthorized operations via the admin/newmaster.php file...

Bus Booking Script SQL Injection Vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script. A remote attacker can obtain sensitive data e.g., current database user, mysql user by sending the 'spid' parameter to the admin/viewseatseller.php fil...