CVE-2017-17595

The CVE concerns Beauty Parlour Booking Script 1.0 (PHP Scripts Mall India) with a SQL injection in the /list endpoint, exploited via the gender or city parameter. The CNVD entry confirms a remote SQL injection vulnerability affecting version 1.0, allowing injection of SQL commands through the li...

CVE-2017-17634

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17595

Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter...

CVE-2017-17619

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17633

CVE-2017-17633 pertains to Multiplex Movie Theater Booking Script 3.1.5, where SQL Injection is possible via user-supplied parameters: trailer-detail.php moid, show-time.php moid, or event-detail.php eid. The root cause is unsafely constructed SQL queries using these inputs, leading to potential ...

CVE-2017-17632

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17601

CVE-2017-17601 affects Cab Booking Script 1.0 (by PHP Scripts Mall India). The vulnerability is a SQL injection in the /service-list endpoint via the city parameter, allowing a remote attacker to inject SQL commands. The connected CNVD entry explicitly describes a SQL injection vulnerability in v...

CVE-2017-17601

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...

CVE-2017-17619

CVE-2017-17619 affects Laundry Booking Script 1.0. The vulnerability is a SQL injection in the /list endpoint via the city parameter, allowing remote command execution according to CNVD-2017-37305 and NVD descriptions. Evidence of public exploitation exists (e.g., Exploit-DB/PacketStorm reference...

CVE-2017-17604

Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...

CVE-2017-17604

Entrepreneur Bus Booking Script 3.0.4 contains an SQL Injection vulnerability in booker_details.php via the sourcebus parameter. The issue enables remote SQL command injection as described by CVE-2017-17604 and corroborated by CNVD/NVD records. The CVSS data indicates high/critical impact (CVSS v...

Multiplex Movie Theater Booking Script 3.1.5 SQL Injection

Exploit Title: Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/multiplex-theater-booking-script/ Version: 3.1.5 Category: Webapps Tested on:...

Multiplex Movie Theater Booking Script 3.1.5 - moid eid SQL Injection

Multiplex Movie Theater Booking Script 3.1.5 - moid eid SQL Injection Exploit Title: Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

Multiplex Movie Theater Booking Script 3.1.5 - 'moid' / 'eid' SQL Injection

Exploit Title: Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/multiplex-theater-booking-script/ Version: 3.1.5 Category: Webapps Tested on:...

Responsive Events & Movie Ticket Booking Script 3.2.1 - 'findcity.php?q' SQL Injection

Exploit Title: Responsive Events & Movie Ticket Booking Script 3.2.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/responsive-events-movie-ticket-booking-script/ Version: 3.2.1 Category: Webapps...

Laundry Booking Script 1.0 - list?city SQL Injection

Laundry Booking Script 1.0 - list?city SQL Injection Exploit Title: Laundry Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/laundry-booking-script/ Version: 1.0 Category: Webapps...

Chartered Accountant Booking Script 1.0 SQL Injection

Exploit Title: Chartered Accountant Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/chartered-accountant-booking-script/ Demo: http://fxwebsolution.com/demo/chartered-accountant/...

[SECURITY] Fedora 27 Update: mrbs-1.7.0-1.fc27

The Meeting Room Booking System MRBS is a PHP-based application for booking meeting rooms...

Beauty Parlour Booking Script 1.0 - gender / city SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Beauty Parlour Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/beauty-booking-script/ Demo:...

Beauty Parlour Booking Script 1.0 - 'gender' / 'city' SQL Injection

Exploit Title: Beauty Parlour Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/beauty-booking-script/ Demo: http://fxwebsolution.com/demo/beautyparlour-search/ Version: 1.0 Category...