Doditsolutions Security Vulnerabilities

CVE-2017-17828

Bus Booking Script has XSS via the results.php datepicker parameter or the admin/new_master.php spemail parameter.

CVE-2017-17829

Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.

CVE-2017-17830

Bus Booking Script has CSRF via admin/new_master.php.