Cab Booking Script 1.0 has SQL Injection via the /service-list city parameter.
cab booking script project cab booking script 1.0