CVE-2017-17829
Bus Booking Script has SQL Injection via the admin/view_seatseller.php sp_id parameter or the admin/view_member.php memid parameter.
Date published : 2017-12-21
https://github.com/d4wner/Vulnerabilities-Report/blob/master/Bus-Booking-Script.md