Cab Booking Script
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2017-17645 | Cri | 0.67 | 9.8 | 0.03 | Dec 18, 2017 | Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php. | ||
| CVE-2017-17601 | Cri | 0.67 | 9.8 | 0.03 | Dec 13, 2017 | Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter. | ||
| CVE-2017-17829 | Hig | 0.47 | 7.2 | 0.01 | Dec 21, 2017 | Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter. | ||
| CVE-2017-17828 | Med | 0.31 | 4.8 | 0.01 | Dec 21, 2017 | Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter. | ||
| CVE-2019-9064 | 0.00 | — | 0.02 | Feb 23, 2019 | PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file. |
- risk 0.67cvss 9.8epss 0.03
Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.
- risk 0.67cvss 9.8epss 0.03
Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
- risk 0.47cvss 7.2epss 0.01
Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.
- risk 0.31cvss 4.8epss 0.01
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter.
- CVE-2019-9064Feb 23, 2019risk 0.00cvss —epss 0.02
PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file.