Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection.
CVSS 4.0CRITICAL 9.3·Network·No auth·No interaction·EPSS 0.00365·Published 2024-09-23·Fixed in 240805-002CWE-89
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS.
CVSS 4.0HIGH 8.8·Network·No auth·No interaction·EPSS 0.00413·Published 2024-09-23·Fixed in 240805-002CWE-79