CVE-2017-17938

概要

参考情報

• d4wner/Vulnerabilities-Report · Exploit

single theater booking script のその他の脆弱性

• CVE-2017-17941高 7.2PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
• CVE-2017-17940中 4.8PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
• CVE-2017-17939高 8.8PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
• CVE-2017-17634緊急 9.8Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.