Online Bus Booking System Project

Online Bus Booking System

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2023-45018

Exploit
  • EPSS 0.1%
  • Veröffentlicht 02.11.2023 03:15:10
  • Zuletzt bearbeitet 21.11.2024 08:26:14

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database...

9.8

CVE-2023-45019

Exploit
  • EPSS 0.1%
  • Veröffentlicht 02.11.2023 03:15:10
  • Zuletzt bearbeitet 21.11.2024 08:26:14

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8

CVE-2023-45012

Exploit
  • EPSS 0.1%
  • Veröffentlicht 02.11.2023 03:15:09
  • Zuletzt bearbeitet 21.11.2024 08:26:14

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8

CVE-2023-45015

Exploit
  • EPSS 0.1%
  • Veröffentlicht 02.11.2023 03:15:09
  • Zuletzt bearbeitet 21.11.2024 08:26:14

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.

9.8

CVE-2020-25889

Exploit
  • EPSS 1.38%
  • Veröffentlicht 08.12.2020 13:15:13
  • Zuletzt bearbeitet 21.11.2024 05:18:58

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.

6.1

CVE-2020-25272

Exploit
  • EPSS 0.21%
  • Veröffentlicht 08.10.2020 13:15:11
  • Zuletzt bearbeitet 21.11.2024 05:17:49

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.

9.8

CVE-2020-25273

Exploit
  • EPSS 1.07%
  • Veröffentlicht 08.10.2020 13:15:11
  • Zuletzt bearbeitet 21.11.2024 05:17:49

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.