CVE-2017-17634

概要

参考情報

• packetstormsecurity.com/files/145344/Single-Theater-Booking-Script-3.2.1-SQL-Injection.html · Exploit
• exploit-db.com/exploits/43302 · Exploit

single theater booking script のその他の脆弱性

• CVE-2017-17941高 7.2PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
• CVE-2017-17940中 4.8PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
• CVE-2017-17939高 8.8PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
• CVE-2017-17938中 4.8PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.