CVE-2017-17829: Improper Neutralization of Special Elements used in an SQL Command

Bus Booking Script has SQL Injection via the admin/viewseatseller.php spid parameter or the admin/viewmember.php memid parameter...