CVE-2017-17645

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...

CVE-2017-17645

CVE-2017-17645 affects Bus Booking Script 1.0. The vulnerability is a SQL Injection via the txtname parameter in admin/index.php, caused by unsanitized input in a PHP/MySQL-based web app. Public references (NVD, CNVD, CVE records) describe SQL injection as the issue, with in-the-wild PoCs/exploit...

Bus Booking Script 1.0 SQL Injection

...

CVE-2017-17645

creationtimestamp| type| source ---|---|--- 2017-12-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43336...

Bus Booking Script 1.0 - 'txtname' SQL Injection

...

Bus Booking Script 1.0 - txtname SQL Injection Vulnerability

Exploit for php platform in category web applications 0day.today 2018-01-01...