cab_booking_script_project - MidnightBSD Security Advisories

Advisories for cab_booking_script_project

CVE-2017-17601 HIGH

Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.

CVSS 2.0

Severity: HIGH

Problem Type: CWE-89,

Products Affected

Vendor	Product	Version
cab_booking_script_project	cab_booking_script	1.0

CVE-2019-9064 MEDIUM

PHP Scripts Mall Cab Booking Script 1.0.3 allows Directory Traversal into the parent directory of a jpg or png file.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-22,

Products Affected

Vendor	Product	Version
cab_booking_script_project	cab_booking_script	1.0.3