CVE-2017-17645

CVE-2017-17645 affects Bus Booking Script 1.0. The vulnerability is a SQL Injection via the txtname parameter in admin/index.php, caused by unsanitized input in a PHP/MySQL-based web app. Public references (NVD, CNVD, CVE records) describe SQL injection as the issue, with in-the-wild PoCs/exploit...

PT-2017-14940

Name of the Vulnerable Software and Affected Versions Bus Booking Script version 1.0 Description The issue is related to SQL Injection, which occurs via the txtname parameter to the "admin/index.php" endpoint. This allows for potential exploitation. Recommendations For Bus Booking Script version...

CVE-2017-17645: Improper Neutralization of Special Elements used in an SQL Command

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

PHP Scripts Mall Single Theater Booking Script SQL Injection Vulnerability

PHP Scripts Mall Single Theater Booking Script is a PHP and MySQL based online theater booking system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Single Theater Booking Script version 3.2.1. A remote attacker can exploit this vulnerability by sending...

PHP Scripts Mall Beauty Parlour Booking Script SQL Injection Vulnerability

PHP Scripts Mall Beauty Parlour Booking Script is a set of PHP based booking scripts for beauty parlor management by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Beauty Parlour Booking Script version 1.0. A remote attacker can exploit the vulnerability by sendi...

PHP Scripts Mall Cab Booking Script SQL Injection Vulnerability

PHP Scripts Mall Cab Booking Script is a PHP based online cab booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Cab Booking Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'city' parameter to /service-list to...

PHP Scripts Mall Multiplex Movie Theater Booking Script SQL Injection Vulnerability

PHP Scripts Mall Multiplex Movie Theater Booking Script is a PHP based online theater seat booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Multiplex Movie Theater Booking Script version 3.1.5. A remote attacker can inject SQL into the Multiplex...

PHP Scripts Mall Laundry Booking Script SQL Injection Vulnerability

PHP Scripts Mall Laundry Booking Script is a PHP based laundry online booking website script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Laundry Booking Script version 1.0. A remote attacker can exploit this vulnerability by sending the 'city' parameter to...

PHP Scripts Mall Chartered Accountant Booking Script SQL Injection Vulnerability

PHP Scripts Mall Chartered Accountant Booking Script is a PHP and MySQL based online search and booking script for accountants by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Chartered Accountant Booking Script version 1.0. A remote attacker can exploit the...

CVE-2017-17633

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

CVE-2017-17619

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17633

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

CVE-2017-17619

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17634

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17634

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17609

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...

CVE-2017-17604

Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...

CVE-2017-17601

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...

CVE-2017-17601

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...

CVE-2017-17609

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...