CVE-2017-17601

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Cab Booking Script version 1.0 has a SQL Injection vulnerability via the city parameter in the /service-list endpoint.

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the confidentiality of user data.

It is recommended to validate and sanitize input data and to update the script to the latest version to mitigate the risk of SQL Injection.

Original NVD description (English source)

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.