17 matches found
EUVD-2017-8759
Malware in sbrugna...
EUVD-2019-18450
Malware in sbrugna...
PHP Scripts Mall Cab Booking Script Path Traversal Vulnerability
PHP Scripts Mall Cab Booking Script is a cab booking website system by PHP Scripts Mall India. A path traversal vulnerability exists in PHP Scripts Mall Cab Booking Script version 1.0.3, which can be exploited by an attacker to obtain a list of parent directories for jpg or png files...
Directory traversal
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
CVE-2019-9064
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
CVE-2019-9064
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
CVE-2019-9064
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
CVE-2019-9064
The CVE-2019-9064 entry corresponds to a directory traversal flaw in PHP Scripts Mall Cab Booking Script 1.0.3. Multiple connected sources (CNVD, CVE records, PRION, NVD) describe that an attacker can traverse directories to reach the parent directory of a jpg or png file, exposing directory stru...
PT-2019-19347
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Cab Booking Script version 1.0.3 Description The issue allows Directory Traversal into the parent directory of a jpg or png file. Recommendations For PHP Scripts Mall Cab Booking Script version 1.0.3, consider restricting acce...
CVE-2019-9064: Improper Limitation of a Pathname to a Restricted Directory
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file...
PHP Scripts Mall Cab Booking Script SQL Injection Vulnerability
PHP Scripts Mall Cab Booking Script is a PHP based online cab booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Cab Booking Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'city' parameter to /service-list to...
CVE-2017-17601
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...
CVE-2017-17601
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...
Sql injection
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...
CVE-2017-17601
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...
CVE-2017-17601: Improper Neutralization of Special Elements used in an SQL Command
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...
PT-2017-14897
Name of the Vulnerable Software and Affected Versions Cab Booking Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /service-list API endpoint, specifically through the city parameter. Recommendations For Cab Booking Script version 1.0, avoid usi...