Sql injection

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter...

CVE-2017-17609

Affected software: Chartered Accountant Booking Script 1.0 by PHP Scripts Mall. Vulnerability: SQL Injection in /service-list via the city parameter due to lack of input validation. Root cause: unvalidated user input composing SQL. Impact: described as SQL injection with potential data exposure/ ...

Chartered Accountant Booking Script 1.0 SQL Injection

Exploit Title: Chartered Accountant Booking Script 1.0 - SQL Injection Dork: N/A Date: 08.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/chartered-accountant-booking-script/ Demo: http://fxwebsolution.com/demo/chartered-accountant/...