2 matches found
CVE-2017-17829
Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.
CVE-2017-17830
Bus Booking Script has CSRF via admin/new_master.php.