5 matches found
CVE-2021-41139
Anuko Time Tracker is an open source, web-based time tracking application written in PHP. When a logged on user selects a date in Time Tracker, it is being passed on via the date parameter in URI. Because of not checking this parameter for sanity in versions prior to 1.19.30.5600, it was possible...
CVE-2021-41139: Improper Neutralization of Input During Web Page Generation
Anuko Time Tracker is an open source, web-based time tracking application written in PHP. When a logged on user selects a date in Time Tracker, it is being passed on via the date parameter in URI. Because of not checking this parameter for sanity in versions prior to 1.19.30.5600, it was possible...
CVE-2017-17633: Improper Neutralization of Special Elements used in an SQL Command
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
PT-2017-14929
Name of the Vulnerable Software and Affected Versions Multiplex Movie Theater Booking Script version 3.1.5 Description The issue concerns SQL Injection via specific parameters in certain PHP files. The vulnerable parameters are moid in trailer-detail.php and show-time.php, and eid in...
