Co-work Space Search Script 1.0 has SQL Injection via the /list city parameter.
co-work space search script project co-work space search script 1.0