CVE-2017-17634

CVE-2017-17634 affects PHP Scripts Mall Single Theater Booking Script 3.2.1. The vulnerability is a SQL Injection in the findcity.php q parameter, enabling remote command execution-like data access. Root cause: unsafely injected q parameter in SQL queries. Impact per sources: high/critical (CVSS ...