CVE-2017-17633

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Multiplex Movie Theater Booking Script 3.1.5 has SQL Injection via the trailer-detail.php moid parameter, show-time.php moid parameter, or event-detail.php eid parameter.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 13, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-176349.8Single Theater Booking Script 3.2.1 has SQL Injection via the findcity.php q parameter.CVE-2017-176359.8MLM Forex Market Plan Script 2.0.4 has SQL Injection via the news_detail.php newid parameter or the event_detail.php eventid parameter.CVE-2017-176369.8MLM Forced Matrix 2.0.9 has SQL Injection via the news-detail.php newid parameter.CVE-2017-176379.8Car Rental Script 2.0.4 has SQL Injection via the countrycode1.php val parameter.CVE-2017-176389.8Groupon Clone Script 3.01 has SQL Injection via the city_ajax.php state_id parameter.CVE-2017-176399.8Muslim Matrimonial Script 3.02 has SQL Injection via the success-story.php succid parameter.CVE-2017-17647.0IBM Cognos Business Intelligence 10.2, 10.2.1, 10.2.1.1, and 10.2.2, under specialized circumstances, could expose plain text credentials toCVE-2017-176409.8Advanced World Database 2.0.5 has SQL Injection via the city.php country or state parameter, or the state.php country parameter.CVE-2017-176419.8Resume Clone Script 2.0.5 has SQL Injection via the preview.php id parameter.CVE-2017-176429.8Basic Job Site Script 2.0.5 has SQL Injection via the keyword parameter to /job.CVE-2017-176439.8FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.CVE-2017-176459.8Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.
CVE-2017-17633: Critical severity, CVSS 9.8 | Vulnix