Codeastro Bus Ticket Booking System vulnerabilities

3 vulnerabilities

Known vulnerabilities in Codeastro Bus Ticket Booking System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2025-25776codeastrobus_ticket_booking_system
EPSS score
0.26%
Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute arbitrary code into the Full Name and Address fields during user registration or profile editing.9.8CVE-2025-25775codeastrobus_ticket_booking_system
EPSS score
0.54%
Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder.8CVE-2025-25777codeastrobus_ticket_booking_system
EPSS score
0.27%
Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in the URL, an attacker can access another user's profile without proper authentication or authorization checks.