CVE Catalog
CVE-2017-17634
CriticalSummary
The Single Theater Booking Script version 3.2.1 has a SQL Injection vulnerability via the q parameter in the findcity.php file.
Risk Assessment
An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or modification.
Recommendation
It is recommended to update the script to the latest version and implement appropriate security measures, such as input validation and sanitization.
Original NVD description (English source)
Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.