Sql injection

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...

CVE-2017-17609

Affected software: Chartered Accountant Booking Script 1.0 by PHP Scripts Mall. Vulnerability: SQL Injection in /service-list via the city parameter due to lack of input validation. Root cause: unvalidated user input composing SQL. Impact: described as SQL injection with potential data exposure/ ...

PT-2017-14905

Name of the Vulnerable Software and Affected Versions Chartered Accountant Booking Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /service-list API endpoint, specifically through the city parameter. Recommendations For Chartered Accountant...

CVE-2017-17609: Improper Neutralization of Special Elements used in an SQL Command

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...

Chartered Accountant Booking Script 1.0 SQL Injection

Exploit Title: Chartered Accountant Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/chartered-accountant-booking-script/ Demo: http://fxwebsolution.com/demo/chartered-accountant/...