201 matches found
CVE-2017-17830
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17828
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...
Design/Logic Flaw
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...
CVE-2017-17828
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...
CVE-2017-17829
Bus Booking Script has SQL Injection via the admin/viewseatseller.php spid parameter or the admin/viewmember.php memid parameter...
CVE-2017-17830
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17828
CVE-2017-17828 affects Bus Booking Script (PHP/MySQL). The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the results.php datepicker parameter or the admin/new_master.php spemail parameter. The connected sources confirm the same XSS description across multiple feeds; no vendor...
CVE-2017-17829
The CVE-2017-17829 entry corresponds to a SQL injection vulnerability in Bus Booking Script (PHP/MySQL). Affected components are the admin/view_seatseller.php sp_id parameter and the admin/view_member.php memid parameter, as described across multiple sources (NVD, CNVD, RH Red Hat, CVE lists). Th...
CVE-2017-17830
CVE-2017-17830 affects Bus Booking Script, with a cross-site request forgery (CSRF) vulnerability found in admin/new_master.php. The connected documents consistently describe CSRF via this endpoint as the issue; no explicit product versions, root-cause detail beyond CSRF, or remediation steps are...
PT-2017-15033
Name of the Vulnerable Software and Affected Versions Bus Booking Script affected versions not specified Description The issue concerns an XSS vulnerability. It can be exploited via the datepicker parameter in the "results.php" endpoint or the spemail parameter in the "admin/new master.php"...
PT-2017-15034
Name of the Vulnerable Software and Affected Versions Bus Booking Script affected versions not specified Description The issue concerns SQL Injection, which can be exploited via specific parameters in certain PHP files. The vulnerable parameters are sp id in the "admin/view seatseller.php" endpoi...
PT-2017-15035
Name of the Vulnerable Software and Affected Versions Bus Booking Script affected versions not specified Description The issue is related to a CSRF vulnerability. It affects the admin/new master.php endpoint. Recommendations At the moment, there is no information about a newer version that contai...
CVE-2017-17830: Cross-Site Request Forgery (CSRF)
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17828: Improper Neutralization of Input During Web Page Generation
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...
CVE-2017-17829: Improper Neutralization of Special Elements used in an SQL Command
Bus Booking Script has SQL Injection via the admin/viewseatseller.php spid parameter or the admin/viewmember.php memid parameter...
Bus Booking Script SQL Injection Vulnerability
Bus Booking Script is an online bus booking management system based on PHP and MySQL. A SQL injection vulnerability exists in Bus Booking Script version 1.0. The vulnerability can be exploited to inject SQL commands by sending the 'txtname' parameter to the admin/index.php file...
CVE-2017-17645
Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...
Sql injection
Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php...