CVE-2017-17619
Laundry Booking Script 1.0 has SQL Injection via the /list city parameter.
Date published : 2017-12-13
https://www.exploit-db.com/exploits/43288/
https://packetstormsecurity.com/files/145328/Laundry-Booking-Script-1.0-SQL-Injection.html