bus booking script vulnerabilities and fixes

Recent CVEs affecting bus booking script, with upgrade or downgrade steps. 3 tracked.

Also searched as: busbookingscript.

bus booking script has 3 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-12-21. Highest priority: CVE-2017-17645 (score 66/100).

• CVE-2017-17830 MEDIUM 6.8 MITIGATE Bus Booking Script has CSRF via admin/new_master.php.
• CVE-2017-17829 HIGH 7.2 MITIGATE Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_membe
• CVE-2017-17645 CRITICAL 9.8 DOWNGRADE Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.

FAQ

How do I fix bus booking script vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is bus booking script being exploited right now?

None of the tracked bus booking script CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which bus booking script CVE should I patch first?

CVE-2017-17645 currently ranks highest (66/100): Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php..

RSS feed for bus booking script · ← Back to latest CVEs