Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Kjayvik Clear all filters
TI-2024-28608 CVE-2024-42765 · GHSA-j3cx-fj78-gw65

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation…

Priority HIGH 82

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parame…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00694 Published 2024-08-23 No fix listed CWE-89
TI-2024-28606 CVE-2024-42763 · GHSA-5pvf-fc2q-jq4q

A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php"…

Priority MEDIUM 58

A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the "bookingdate…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0044 Published 2024-08-22 No fix listed CWE-79
TI-2024-28605 CVE-2024-42762 · GHSA-j9pj-4vv7-cpj9

A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in…

Priority MEDIUM 58

A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parame…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0044 Published 2024-08-22 No fix listed CWE-79
TI-2024-28604 CVE-2024-42761 · GHSA-m59m-755q-5h2m

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in…

Priority MEDIUM 60

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parame…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0047 Published 2024-08-22 No fix listed CWE-79