Sql injection

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...

Sql injection

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...

Sql injection

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

Sql injection

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

Sql injection

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

Sql injection

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17601

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...

CVE-2017-17634

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17604

Entrepreneur Bus Booking Script 3.0.4 contains an SQL Injection vulnerability in booker_details.php via the sourcebus parameter. The issue enables remote SQL command injection as described by CVE-2017-17604 and corroborated by CNVD/NVD records. The CVSS data indicates high/critical impact (CVSS v...

CVE-2017-17595

The CVE concerns Beauty Parlour Booking Script 1.0 (PHP Scripts Mall India) with a SQL injection in the /list endpoint, exploited via the gender or city parameter. The CNVD entry confirms a remote SQL injection vulnerability affecting version 1.0, allowing injection of SQL commands through the li...

CVE-2017-17609

Affected software: Chartered Accountant Booking Script 1.0 by PHP Scripts Mall. Vulnerability: SQL Injection in /service-list via the city parameter due to lack of input validation. Root cause: unvalidated user input composing SQL. Impact: described as SQL injection with potential data exposure/ ...

CVE-2017-17632

CVE-2017-17632 affects the PHP Scripts Mall Responsive Events And Movie Ticket Booking Script 3.2.1. The vulnerability is an SQL Injection via the findcity.php q parameter. Public references (NVD/CNVD) describe remote exploitation with potentially high impact and critical CVSS 3.0 score (C/H/I/A ...

CVE-2017-17633

CVE-2017-17633 pertains to Multiplex Movie Theater Booking Script 3.1.5, where SQL Injection is possible via user-supplied parameters: trailer-detail.php moid, show-time.php moid, or event-detail.php eid. The root cause is unsafely constructed SQL queries using these inputs, leading to potential ...

CVE-2017-17619

Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...

CVE-2017-17595

Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter...

CVE-2017-17619

CVE-2017-17619 affects Laundry Booking Script 1.0. The vulnerability is a SQL injection in the /list endpoint via the city parameter, allowing remote command execution according to CNVD-2017-37305 and NVD descriptions. Evidence of public exploitation exists (e.g., Exploit-DB/PacketStorm reference...

CVE-2017-17604: Improper Neutralization of Special Elements used in an SQL Command

Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...

CVE-2017-17633: Improper Neutralization of Special Elements used in an SQL Command

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...

PT-2017-14929

Name of the Vulnerable Software and Affected Versions Multiplex Movie Theater Booking Script version 3.1.5 Description The issue concerns SQL Injection via specific parameters in certain PHP files. The vulnerable parameters are moid in trailer-detail.php and show-time.php, and eid in...

PT-2017-14890

Name of the Vulnerable Software and Affected Versions Beauty Parlour Booking Script version 1.0 Description The issue is related to SQL Injection, which can be exploited via the /list API endpoint, specifically through the gender or city parameters. Recommendations For Beauty Parlour Booking Scri...