CVE-2017-17609

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Chartered Accountant Booking Script version 1.0 has an SQL Injection vulnerability via the city parameter in the /service-list endpoint.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to the leakage of sensitive information.

Recommendation

It is recommended to validate and sanitize input data in the city parameter and to update the script to the latest version to eliminate this vulnerability.

Original NVD description (English source)

Chartered Accountant Booking Script 1.0 has SQL Injection via the /service-list city parameter.