Security Advisory
CVE-2017-17829
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.