10 matches found
Design/Logic Flaw
PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter...
CVE-2017-17938
PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter...
PT-2017-15115
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a CSRF vulnerability via the admin/sitesettings.php endpoint. This means an attacker could potentially perform unauthorized actions on...
CVE-2017-17940: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...
CVE-2017-17939: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php...
PT-2017-15114
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a security problem where an attacker can execute malicious scripts. This is possible due to the lack of proper input validation in the...
PT-2017-15117
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to SQL Injection, which occurs via the movieid parameter in the "admin/movieview.php" API endpoint. This allows for potential exploitation...
CVE-2017-17941: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...
CVE-2017-17938: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter...
PT-2017-15116
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the title...