Ticket Booking Script=0D
=0D
Homepage:=0D
http://www.mole.com.ua=0D 
=0D
Effected files:=0D
input boxes on booking2.php=0D
=0D
XSS Vulnerabilities:=0D
=0D
The input boxes on booking2.php do not sanatize userinput before geenrating it and then submitting it to a MySQL db. This can causes XSS examples as well as possible SQL injections.=0D
=0D
For PoC just put  in any of the input boxes =0D