Sql injection

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...

Sql injection

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

Sql injection

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

Sql injection

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

Sql injection

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

CVE-2017-17609

Affected software: Chartered Accountant Booking Script 1.0 by PHP Scripts Mall. Vulnerability: SQL Injection in /service-list via the city parameter due to lack of input validation. Root cause: unvalidated user input composing SQL. Impact: described as SQL injection with potential data exposure/ ...

CVE-2017-17634

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17619

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17595

Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter...

CVE-2017-17633

CVE-2017-17633 pertains to Multiplex Movie Theater Booking Script 3.1.5, where SQL Injection is possible via user-supplied parameters: trailer-detail.php moid, show-time.php moid, or event-detail.php eid. The root cause is unsafely constructed SQL queries using these inputs, leading to potential ...

CVE-2017-17595

The CVE concerns Beauty Parlour Booking Script 1.0 (PHP Scripts Mall India) with a SQL injection in the /list endpoint, exploited via the gender or city parameter. The CNVD entry confirms a remote SQL injection vulnerability affecting version 1.0, allowing injection of SQL commands through the li...

CVE-2017-17632

CVE-2017-17632 affects the PHP Scripts Mall Responsive Events And Movie Ticket Booking Script 3.2.1. The vulnerability is an SQL Injection via the findcity.php q parameter. Public references (NVD/CNVD) describe remote exploitation with potentially high impact and critical CVSS 3.0 score (C/H/I/A ...

CVE-2017-17601

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...

CVE-2017-17604

Entrepreneur Bus Booking Script 3.0.4 contains an SQL Injection vulnerability in booker_details.php via the sourcebus parameter. The issue enables remote SQL command injection as described by CVE-2017-17604 and corroborated by CNVD/NVD records. The CVSS data indicates high/critical impact (CVSS v...

CVE-2017-17619

CVE-2017-17619 affects Laundry Booking Script 1.0. The vulnerability is a SQL injection in the /list endpoint via the city parameter, allowing remote command execution according to CNVD-2017-37305 and NVD descriptions. Evidence of public exploitation exists (e.g., Exploit-DB/PacketStorm reference...

Multiplex Movie Theater Booking Script 3.1.5 SQL Injection

Exploit Title: Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/multiplex-theater-booking-script/ Version: 3.1.5 Category: Webapps Tested on:...

Multiplex Movie Theater Booking Script 3.1.5 - moid eid SQL Injection

Multiplex Movie Theater Booking Script 3.1.5 - moid eid SQL Injection Exploit Title: Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

Responsive Events & Movie Ticket Booking Script 3.2.1 - 'findcity.php?q' SQL Injection

Exploit Title: Responsive Events & Movie Ticket Booking Script 3.2.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/responsive-events-movie-ticket-booking-script/ Version: 3.2.1 Category: Webapps...

Multiplex Movie Theater Booking Script 3.1.5 - 'moid' / 'eid' SQL Injection

Exploit Title: Multiplex Movie Theater Booking Script 3.1.5 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/multiplex-theater-booking-script/ Version: 3.1.5 Category: Webapps Tested on:...

Chartered Accountant Booking Script 1.0 SQL Injection

Exploit Title: Chartered Accountant Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/chartered-accountant-booking-script/ Demo: http://fxwebsolution.com/demo/chartered-accountant/...