CVE-2017-17645

Critical

Published: 18/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Bus Booking Script version 1.0 has an SQL Injection vulnerability via the txtname parameter in admin/index.php.

Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information.

It is recommended to validate and sanitize input data and to update the script to the latest version to mitigate the risk.

Original NVD description (English source)

Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.