CVE-2017-17632: Improper Neutralization of Special Elements used in an SQL Command

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17604: Improper Neutralization of Special Elements used in an SQL Command

Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...

CVE-2017-17633: Improper Neutralization of Special Elements used in an SQL Command

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

PT-2017-14890

Name of the Vulnerable Software and Affected Versions Beauty Parlour Booking Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /list API endpoint, specifically through the gender or city parameters. Recommendations For Beauty Parlour Booking Scri...

PT-2017-14900

Name of the Vulnerable Software and Affected Versions Entrepreneur Bus Booking Script version 3.0.4 Description The issue is related to SQL Injection, which occurs via the sourcebus parameter in the booker details.php file. Recommendations For Entrepreneur Bus Booking Script version 3.0.4, consid...

PT-2017-14928

Name of the Vulnerable Software and Affected Versions Responsive Events And Movie Ticket Booking Script version 3.2.1 Description The issue is related to SQL Injection, which can be exploited via the findcity.php q parameter. This allows for potential unauthorized access to database information...

PT-2017-14930

Name of the Vulnerable Software and Affected Versions Single Theater Booking Script version 3.2.1 Description The issue is related to SQL Injection, which occurs via the findcity.php q parameter. This allows for potential exploitation. Recommendations For Single Theater Booking Script version...

PT-2017-14897

Name of the Vulnerable Software and Affected Versions Cab Booking Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /service-list API endpoint, specifically through the city parameter. Recommendations For Cab Booking Script version 1.0, avoid usi...

PT-2017-14905

Name of the Vulnerable Software and Affected Versions Chartered Accountant Booking Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /service-list API endpoint, specifically through the city parameter. Recommendations For Chartered Accountant...

PT-2017-14929

Name of the Vulnerable Software and Affected Versions Multiplex Movie Theater Booking Script version 3.1.5 Description The issue concerns SQL Injection via specific parameters in certain PHP files. The vulnerable parameters are moid in trailer-detail.php and show-time.php, and eid in...

PT-2017-14915

Name of the Vulnerable Software and Affected Versions Laundry Booking Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the city parameter in the "/list" API endpoint. Recommendations For Laundry Booking Script version 1.0, consider restricting acces...

CVE-2017-17609: Improper Neutralization of Special Elements used in an SQL Command

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...

CVE-2017-17634: Improper Neutralization of Special Elements used in an SQL Command

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17619: Improper Neutralization of Special Elements used in an SQL Command

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17595: Improper Neutralization of Special Elements used in an SQL Command

Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter...

CVE-2017-17601: Improper Neutralization of Special Elements used in an SQL Command

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...

Multiplex Movie Theater Booking Script 3.1.5 SQL Injection

Exploit Title: Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/multiplex-theater-booking-script/ Version: 3.1.5 Category: Webapps Tested on:...

Chartered Accountant Booking Script 1.0 SQL Injection

Exploit Title: Chartered Accountant Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/chartered-accountant-booking-script/ Demo: http://fxwebsolution.com/demo/chartered-accountant/...

Multiplex Movie Theater Booking Script 3.1.5 - 'moid' / 'eid' SQL Injection

Exploit Title: Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/multiplex-theater-booking-script/ Version: 3.1.5 Category: Webapps Tested on:...

Laundry Booking Script 1.0 - list?city SQL Injection

Laundry Booking Script 1.0 - list?city SQL Injection Exploit Title: Laundry Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/laundry-booking-script/ Version: 1.0 Category: Webapps...