Vulnerabilities

TI-2023-24076 CVE-2023-45019 · GHSA-f38r-jrwh-28gc

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-24075 CVE-2023-45018 · GHSA-fc2p-qgr6-g55f

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-24074 CVE-2023-45015 · GHSA-4gfq-3jg9-qhqx

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00836 Published 2023-11-02 No fix listed CWE-89

TI-2023-24073 CVE-2023-45012 · GHSA-r6w6-q776-2fqr

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

HIGH 82

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00804 Published 2023-11-02 No fix listed CWE-89

TI-2020-15866 CVE-2020-25889 · GHSA-qgr9-4rvm-qxmp

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the…

MEDIUM 47

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0276 Published 2020-12-08 No fix listed CWE-89

TI-2020-15507 CVE-2020-25273 · GHSA-x3m9-xj8f-j8qr

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the…

MEDIUM 46

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01813 Published 2020-10-08 No fix listed CWE-89

TI-2020-15506 CVE-2020-25272 · GHSA-97w2-qr5v-48j2

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.

LOW 29

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00866 Published 2020-10-08 No fix listed CWE-79

Vulnerabilities

Filters

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the…

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the…

In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.