6 matches found
Cross site request forgery (csrf)
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17830
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17830
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17830
CVE-2017-17830 affects Bus Booking Script, with a cross-site request forgery (CSRF) vulnerability found in admin/new_master.php. The connected documents consistently describe CSRF via this endpoint as the issue; no explicit product versions, root-cause detail beyond CSRF, or remediation steps are...
CVE-2017-17830: Cross-Site Request Forgery (CSRF)
Bus Booking Script has CSRF via admin/newmaster.php...
CVE-2017-17828: Improper Neutralization of Input During Web Page Generation
Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...