2 matches found
CVE-2017-17633: Improper Neutralization of Special Elements used in an SQL Command
Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter...
9.8CVSS8.1AI score0.02204EPSS
SaveExploits2References2
PT-2017-14929
Name of the Vulnerable Software and Affected Versions Multiplex Movie Theater Booking Script version 3.1.5 Description The issue concerns SQL Injection via specific parameters in certain PHP files. The vulnerable parameters are moid in trailer-detail.php and show-time.php, and eid in...
9.8CVSS0.02204EPSS
SaveExploits2References4
20