CVE-2017-17634

Description

References

• packetstormsecurity.com/files/145344/Single-Theater-Booking-Script-3.2.1-SQL-Injection.html · Exploit
• exploit-db.com/exploits/43302 · Exploit

Mais vulnerabilidades de single theater booking script

• CVE-2017-17941ALTO 7.2PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
• CVE-2017-17940MÉDIO 4.8PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
• CVE-2017-17939ALTO 8.8PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
• CVE-2017-17938MÉDIO 4.8PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.