EUVD-2017-8979

Malware in sbrugna...

CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...

CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...

Design/Logic Flaw

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...

CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...

CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...

CVE-2017-17828

CVE-2017-17828 affects Bus Booking Script (PHP/MySQL). The vulnerability is a Cross-Site Scripting (XSS) flaw exploitable via the results.php datepicker parameter or the admin/new_master.php spemail parameter. The connected sources confirm the same XSS description across multiple feeds; no vendor...

CVE-2017-17828: Improper Neutralization of Input During Web Page Generation

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/newmaster.php spemail parameter...

PT-2017-15033

Name of the Vulnerable Software and Affected Versions Bus Booking Script affected versions not specified Description The issue concerns an XSS vulnerability. It can be exploited via the datepicker parameter in the "results.php" endpoint or the spemail parameter in the "admin/new master.php"...