CVE-2017-17829

Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.

Score

CVSS 3.0 7.2 High

Status

Modified - cve@mitre.org

Published

2017-12-21

Last modified

2024-09-17

Weaknesses

CWE-89

Affected products

• Bus Booking Script (Doditsolutions)

References

• https://github.com/d4wner/Vulnerabilities-Report/blob/master/Bus-Booking-Script.md