CVE-2017-17829

High

Published: 21/12/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Bus Booking Script has a SQL Injection vulnerability via the sp_id parameter in admin/view_seatseller.php and the memid parameter in admin/view_member.php.

Risk Assessment

An attacker could exploit this vulnerability to gain unauthorized access to the database, potentially leading to data leakage or data manipulation.

Recommendation

It is recommended to validate and sanitize input data and to update the script to the latest version to eliminate this vulnerability.

Other vulnerabilities in Bus Booking Script

CVE-2017-17645Critical
Bus Booking Script version 1.0 has an SQL Injection vulnerability via the txtname parameter in admin/index.php.

Original NVD description (English source)

Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.