CVE-2017-17595

Beauty Parlour Booking Script 1.0 has SQL Injection via the /list gender or city parameter...

CVE-2017-17595

The CVE concerns Beauty Parlour Booking Script 1.0 (PHP Scripts Mall India) with a SQL injection in the /list endpoint, exploited via the gender or city parameter. The CNVD entry confirms a remote SQL injection vulnerability affecting version 1.0, allowing injection of SQL commands through the li...