PHP Scripts Mall Responsive Events And Movie Ticket Booking Script SQL Injection Vulnerability

PHP Scripts Mall Responsive Events And Movie Ticket Booking Script is a PHP based online movie ticket booking script by PHP Scripts Mall India. A SQL injection vulnerability exists in PHP Scripts Mall Responsive Events And Movie Ticket Booking Script version 3.2.1. The vulnerability can be...

CVE-2017-17628

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...

CVE-2017-17632

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

Sql injection

Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter...

Sql injection

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

Sql injection

Responsive Realestate Script 3.2 has SQL Injection via the property-list tbud parameter...

CVE-2017-17631

Multireligion Responsive Matrimonial 4.7.2 has SQL Injection via the success-story.php succid parameter...

CVE-2017-17632

CVE-2017-17632 affects the PHP Scripts Mall Responsive Events And Movie Ticket Booking Script 3.2.1. The vulnerability is an SQL Injection via the findcity.php q parameter. Public references (NVD/CNVD) describe remote exploitation with potentially high impact and critical CVSS 3.0 score (C/H/I/A ...

CVE-2017-17631

CVE-2017-17631 affects Multireligion Responsive Matrimonial 4.7.2, where a SQL injection is possible through the succid parameter in success-story.php. The vulnerability stems from unsafely handling user-supplied input, enabling an attacker to inject SQL commands. Product/version: Multireligion R...

CVE-2017-17632

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter...

CVE-2017-17628

CVE-2017-17628 affects Responsive Realestate Script 3.2 by PHP Scripts Mall. The vulnerability is a SQL injection in the property-list endpoint via the tbud parameter, allowing remote attackers to inject SQL commands. Public references (Exploit-DB entry 43297 and Packet Storm payload) indicate ex...

Responsive Events & Movie Ticket Booking Script 3.2.1 - 'findcity.php?q' SQL Injection

Exploit Title: Responsive Events & Movie Ticket Booking Script 3.2.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link: https://www.phpscriptsmall.com/product/responsive-events-movie-ticket-booking-script/ Version: 3.2.1 Category: Webapps...

Responsive Events Movie Ticket Booking Script 3.2.1 - findcity.php?q SQL Injection

Responsive Events Movie Ticket Booking Script 3.2.1 - findcity.php?q SQL Injection Exploit Title: Responsive Events & Movie Ticket Booking Script 3.2.1 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

Multireligion Responsive Matrimonial 4.7.2 - succid SQL Injection

Multireligion Responsive Matrimonial 4.7.2 - succid SQL Injection Exploit Title: Multireligion Responsive Matrimonial 4.7.2 - SQL Injection Dork: N/A Date: 09.12.2017 Vendor Homepage: https://www.phpscriptsmall.com/ Software Link:...

Cross site scripting

Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can...

CVE-2017-1000227

Stored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can...

CVE-2017-1000227

The CVE targets Salutation Responsive WordPress + BuddyPress Theme, version 3.0.15. A Stored XSS vulnerability exists in this theme, enabling a logged-in attacker to perform admin-like actions. Several sources (e.g., NVD entry for CVE-2017-1000227 and related advisories) describe the issue as a C...

WordPress JTRT Responsive Tables plugin 4.1 - SQL Injection (SQLi) vulnerability

SQL Injection SQLi vulnerability found by Lenon Leite in WordPress JTRT Responsive Tables plugin version 4.1. Solution 7th November 2017 - we were unable to find a patched version of this plugin...

WordPress JTRT Responsive Tables 4.1 SQL Injection

Exploit Title: JTRT Responsive Tables 4.1 a WordPress Plugin a Sql Injection Exploit Author: Lenon Leite Vendor Homepage: https://wordpress.org/plugins/jtrt-responsive-tables/ Software Link: https://wordpress.org/plugins/jtrt-responsive-tables/ Contact: http://twitter.com/lenonleite Website:...

JTRT Responsive Tables <= 4.1 – Authenticated SQL Injection

Type user access: single user. $POST‘tableId’ is not escaped. File / Code: Path: /wp-content/plugins/jtrt-responsive-tables/admin/class-jtrt-responsive-tables-admin.php Line : 183 $getTableId = $POST'tableId'; ... $retrievedata = $wpdb-getresults "SELECT FROM $jtrttablesname WHERE jttableIDD = "...