Bus Booking Script admin/new_master.php file cross-site request forgery vulnerability

Bus Booking Script is an online bus booking management system based on PHP and MySQL. A cross-site request forgery vulnerability exists in Bus Booking Script. A remote attacker can exploit this vulnerability to perform unauthorized operations via the admin/newmaster.php file...

CVE-2017-17830

Bus Booking Script has CSRF via admin/newmaster.php...

CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...