CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.07.24)
The Single Theater Booking Script version 3.2.1 has a SQL Injection vulnerability via the q parameter in the findcity.php file.
Multiplex Movie Theater Booking Script version 3.1.5 has an SQL Injection vulnerability via the moid parameter in trailer-detail.php, moid parameter in show-time.php, or eid parameter in event-detail.php.
The Responsive Events Movie Ticket Booking Script version 3.2.1 has an SQL Injection vulnerability via the q parameter in the findcity.php file.
Version 4.7.2 of Multireligion Responsive Matrimonial has an SQL Injection vulnerability via the succid parameter in the success-story.php file.
Yoga Class Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Secure E-commerce Script version 2.0.1 is vulnerable to SQL Injection via the searchmain or searchcat parameters in category.php and the sid parameter in single_detail.php.
Responsive Realestate Script version 3.2 has a SQL Injection vulnerability via the tbud parameter in property-list.
Readymade Video Sharing Script version 3.2 has an SQL Injection vulnerability via the report_videos array parameter in single-video-detail.php.
Readymade PHP Classified Script version 3.3 has a SQL Injection vulnerability via the /categories subctid or mctid parameter.
Professional Service Script version 1.0 has a SQL Injection vulnerability via the city parameter in the service list.
PHP Multivendor Ecommerce version 1.0 has an SQL Injection vulnerability via the sid parameter in single_detail.php and the searchcat or chid1 parameters in category.php.
Opensource Classified Ads Script version 3.2 has a SQL Injection vulnerability via the keyword parameter in advance_result.php.
The Online Exam Test Application Script version 1.6 has a SQL Injection vulnerability via the sort parameter in the exams.php file.
Multivendor Penny Auction Clone Script version 1.0 has a SQL Injection vulnerability via the PATH_INFO parameter in the /detail URI.
Lawyer Search Script version 1.1 has a SQL Injection vulnerability via the city parameter in the /lawyer-list endpoint.
Laundry Booking Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.
Kickstarter Clone Script 2.0 has a SQL Injection vulnerability via the projid parameter in the investcalc.php file.
Foodspotting Clone Script version 1.0 has an SQL Injection vulnerability via the q parameter in quicksearch.php.
Event Search Script 1.0 has a SQL Injection vulnerability via the city parameter in the /event-list path.
Food Order Script version 1.0 has a SQL Injection vulnerability via the /list city parameter.

