6150 matches found
CVE-2017-17941
PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...
CVE-2017-17938
PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter...
CVE-2017-17938
The CVE-2017-17938 vulnerability affects PHP Scripts Mall Single Theater Booking. The issue is a cross-site scripting (XSS) flaw exploitable through the admin/viewtheatre.php theatreid parameter, likely allowing an attacker to inject arbitrary script via this input. The connected sources consiste...
CVE-2017-17940
CVE-2017-17940 concerns PHP Scripts Mall Single Theater Booking. The issue is a cross-site scripting (XSS) vulnerability in the admin/sitesettings.php page caused by unsafely handling the title parameter. The exploit path is user-controlled input reflected in the title field, enabling an attacker...
CVE-2017-17939
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php...
CVE-2017-17939
The CVE-2017-17939 entry relates to PHP Scripts Mall Single Theater Booking and describes a Cross-Site Request Forgery (CSRF) vulnerability in the admin/sitesettings.php page. The affected software/component is PHP Scripts Mall Single Theater Booking; the underlying issue is CSRF that allows an a...
CVE-2017-17941
CVE-2017-17941 affects the PHP Scripts Mall Single Theater Booking product, with a SQL Injection vulnerability exposed through the admin/movieview.php?movieid parameter. The connected documents consistently describe exploitability leading to disclosure of usernames or sensitive data. No specific ...
CVE-2017-17940
PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...
PHP Scripts Mall Single Theater Booking Cross-Site Scripting Vulnerability
PHP Scripts Mall Single Theater Booking is an open source theater script. A cross-site scripting vulnerability exists in PHP Scripts Mall Single Theater Booking. A remote attacker can inject arbitrary web script or HTML by sending the 'theaterid' parameter to the admin/viewtheatre.php file...
PHP Scripts Mall Single Theater Booking Cross-Site Scripting Vulnerability (CNVD-2018-00498)
PHP Scripts Mall Single Theater Booking is an open source theater script. A cross-site scripting vulnerability exists in PHP Scripts Mall Single Theater Booking. A remote attacker can inject arbitrary web script or HTML by sending the 'title' parameter to the admin/sitesettings.php file...
PT-2017-15114
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a security problem where an attacker can execute malicious scripts. This is possible due to the lack of proper input validation in the...
PT-2017-15115
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a CSRF vulnerability via the admin/sitesettings.php endpoint. This means an attacker could potentially perform unauthorized actions on...
PT-2017-15116
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to a security problem where an attacker can inject malicious code. This is possible due to insufficient input validation in the title...
CVE-2017-17941: Improper Neutralization of Special Elements used in an SQL Command
PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter...
CVE-2017-17939: Cross-Site Request Forgery (CSRF)
PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php...
CVE-2017-17938: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter...
CVE-2017-17940: Improper Neutralization of Input During Web Page Generation
PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php...
PT-2017-15117
Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Single Theater Booking affected versions not specified Description The issue is related to SQL Injection, which occurs via the movieid parameter in the "admin/movieview.php" API endpoint. This allows for potential exploitation...
