CVE-2017-17632

Critical

Published: 13/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The Responsive Events Movie Ticket Booking Script version 3.2.1 has an SQL Injection vulnerability via the q parameter in the findcity.php file.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized queries against the database, potentially leading to the disclosure of sensitive information or data manipulation.

Recommendation

It is recommended to update the script to the latest version and implement input validation and sanitization to mitigate the risk of SQL Injection.

Original NVD description (English source)

Responsive Events And Movie Ticket Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.