Doditsolutions Bus Booking Script — known CVE vulnerabilities

Every CVE whose affected-product data names Doditsolutions Bus Booking Script, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2017-17829 — CVSS 7.2 (high): Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.
• CVE-2017-17830 — CVSS 6.8 (medium): Bus Booking Script has CSRF via admin/new_master.php.