Read the docs

Kjayvik

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Kjayvik records in CISA KEV

No Kjayvik vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Bus Ticket Reservation System 6 records HIGH

Records

6 records

TI-2024-28608 CVE-2024-42765 · GHSA-j3cx-fj78-gw65

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation…

Priority HIGH 82

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parame…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00694 Published 2024-08-23 No fix listed CWE-89
TI-2024-28604 CVE-2024-42761 · GHSA-m59m-755q-5h2m

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in…

Priority MEDIUM 60

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parame…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0047 Published 2024-08-22 No fix listed CWE-79
TI-2024-28606 CVE-2024-42763 · GHSA-5pvf-fc2q-jq4q

A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php"…

Priority MEDIUM 58

A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the "bookingdate…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0044 Published 2024-08-22 No fix listed CWE-79
TI-2024-28605 CVE-2024-42762 · GHSA-j9pj-4vv7-cpj9

A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in…

Priority MEDIUM 58

A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parame…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0044 Published 2024-08-22 No fix listed CWE-79
Open these records in search →