10019 matches found
CVE-2017-17601
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...
CVE-2017-17609
Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...
CVE-2017-17609
Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...
CVE-2017-17601
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...
CVE-2017-17604
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...
CVE-2017-17604
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...
Sql injection
Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter...
Sql injection
Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...
Sql injection
Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...
Sql injection
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter...
Sql injection
Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...
Sql injection
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...
Sql injection
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
Sql injection
Laundry Booking Script 1.0 has SQL Injection via the /list city parameter...
CVE-2017-17619
CVE-2017-17619 affects Laundry Booking Script 1.0. The vulnerability is a SQL injection in the /list endpoint via the city parameter, allowing remote command execution according to CNVD-2017-37305 and NVD descriptions. Evidence of public exploitation exists (e.g., Exploit-DB/PacketStorm reference...
CVE-2017-17595
Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter...
CVE-2017-17604
Entrepreneur Bus Booking Script 3.0.4 contains an SQL Injection vulnerability in booker_details.php via the sourcebus parameter. The issue enables remote SQL command injection as described by CVE-2017-17604 and corroborated by CNVD/NVD records. The CVSS data indicates high/critical impact (CVSS v...
CVE-2017-17632
CVE-2017-17632 affects the PHP Scripts Mall Responsive Events And Movie Ticket Booking Script 3.2.1. The vulnerability is an SQL Injection via the findcity.php q parameter. Public references (NVD/CNVD) describe remote exploitation with potentially high impact and critical CVSS 3.0 score (C/H/I/A ...