critical9.8Public exploit code
CVE-2017-17604
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Entrepreneur Bus Booking Script 3.0.4 - 'sourcebus' SQL Injection2017-12-11 · webapps · php
Impact
Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Entrepreneur Bus Booking Script Project | Entrepreneur Bus Booking Script | Version 3.0.4 |
Weakness classification
References
- NVD record
- CVE.org record
- https://packetstormsecurity.com/files/145346/Entrepreneur-Bus-Booking-Script-3.0.4-SQL-Injection.html
- https://www.exploit-db.com/exploits/43305/
- https://packetstormsecurity.com/files/145346/Entrepreneur-Bus-Booking-Script-3.0.4-SQL-Injection.html
- https://www.exploit-db.com/exploits/43305/