PHP Scripts Mall Single Theater Booking Script SQL Injection Vulnerability

PHP Scripts Mall Single Theater Booking Script is a PHP and MySQL based online theater booking system script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Single Theater Booking Script version 3.2.1. A remote attacker can exploit this vulnerability by sending...

CVE-2017-17617

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...

CVE-2017-17632: Improper Neutralization of Special Elements used in an SQL Command

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17634: Improper Neutralization of Special Elements used in an SQL Command

Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

PT-2017-14930

Name of the Vulnerable Software and Affected Versions Single Theater Booking Script version 3.2.1 Description The issue is related to SQL Injection, which occurs via the findcity.php q parameter. This allows for potential exploitation. Recommendations For Single Theater Booking Script version...

PT-2017-14928

Name of the Vulnerable Software and Affected Versions Responsive Events And Movie Ticket Booking Script version 3.2.1 Description The issue is related to SQL Injection, which can be exploited via the findcity.php q parameter. This allows for potential unauthorized access to database information...

PT-2017-14913

Name of the Vulnerable Software and Affected Versions Foodspotting Clone Script version 1.0 Description The issue is related to SQL Injection, which occurs via the quicksearch.php API endpoint, specifically through the q parameter. This allows for potential exploitation. Recommendations For...

CVE-2017-17617: Improper Neutralization of Special Elements used in an SQL Command

Foodspotting Clone Script 1.0 has SQL Injection via the quicksearch.php q parameter...

CVE-2017-17431

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765...

PT-2017-14776

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765...

CVE-2017-17431: Improper Neutralization of Input During Web Page Generation

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765...

Sql injection

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

CVE-2017-15373

CVE-2017-15373 : E-Sic 1.0 contains a SQL injection in the query parameter “q” of esiclivre/restrito/inc/lkpcep.php (the search private area). The root cause is improper handling of input leading to arbitrary SQL execution. Impact is described as partial to high confidentiality, integrity, and av...

PT-2017-14031

Name of the Vulnerable Software and Affected Versions E-Sic version 1.0 Description The issue allows SQL injection via the q parameter to the "esiclivre/restrito/inc/lkpcep.php" endpoint, which is related to the search private area. Recommendations For E-Sic version 1.0, consider restricting acce...

CVE-2017-15373: Improper Neutralization of Special Elements used in an SQL Command

E-Sic 1.0 allows SQL injection via the q parameter to esiclivre/restrito/inc/lkpcep.php aka the search private area...

Fedora Update for q FEDORA-2017-8f27031c8f

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for q FEDORA-2017-3a568adb31

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 25 Update: q-7.11-29.fc25

Q is a powerful and extensible functional programming language based on the term rewriting calculus. You specify an arbitrary system of equations which the interpreter uses as rewrite rules to reduce expressions to normal form. Q is useful for scientific programming and other advanced application...

[SECURITY] Fedora 26 Update: q-7.11-29.fc26

Q is a powerful and extensible functional programming language based on the term rewriting calculus. You specify an arbitrary system of equations which the interpreter uses as rewrite rules to reduce expressions to normal form. Q is useful for scientific programming and other advanced application...

ImageMagick Denial of Service Vulnerability (CNVD-2017-26585)

ImageMagick is a software for creating, editing, and compositing images that can read, convert, and write images in many formats. A denial of service vulnerability exists in the ReadMPCImage of the coders/mpc.c file in ImageMagick version 7.0.6-8 Q16, which stems from the program failing to...