2 matches found
CVE-2019-9064
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file.
CVE-2017-17601
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.