CVE-2017-17604: Improper Neutralization of Special Elements used in an SQL Command

Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the bookerdetails.php sourcebus parameter...