PT-2017-14915 · Unknown · Laundry Booking Script

Ihsan Sencan · Published 2017-12-13 · Updated 2017-12-26 · CVE-2017-17619

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Laundry Booking Script version 1.0

Description The issue is related to SQL Injection, which can be exploited via the city parameter in the "/list" API endpoint.

Recommendations For Laundry Booking Script version 1.0, consider restricting access to the "/list" API endpoint or disabling the city parameter to minimize the risk of exploitation until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2017-17619

Affected Products

Laundry Booking Script

References · 5

• 🔥 https://exploit-db.com/exploits/43288 · Exploit
• 🔥 https://packetstormsecurity.com/files/145330/Laundry-Booking-Script-1.0-SQL-Injection.html · Exploit
• 🔥 https://packetstormsecurity.com/files/145328/Laundry-Booking-Script-1.0-SQL-Injection.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-17619 · Security Note
• https://osv.dev/vulnerability/CVE-2017-17619 · Vendor Advisory