CVE-2017-17634

Description

References

• packetstormsecurity.com/files/145344/Single-Theater-Booking-Script-3.2.1-SQL-Injection.html · Exploit
• exploit-db.com/exploits/43302 · Exploit

single theater booking script 的其他漏洞

• CVE-2017-17941高危 7.2PHP Scripts Mall Single Theater Booking has SQL Injection via the admin/movieview.php movieid parameter.
• CVE-2017-17940中危 4.8PHP Scripts Mall Single Theater Booking has XSS via the title parameter to admin/sitesettings.php.
• CVE-2017-17939高危 8.8PHP Scripts Mall Single Theater Booking has CSRF via admin/sitesettings.php.
• CVE-2017-17938中危 4.8PHP Scripts Mall Single Theater Booking has XSS via the admin/viewtheatre.php theatreid parameter.