Online Bus Booking System Project Online Bus Booking System vulnerabilities

7 vulnerabilities

Known vulnerabilities in Online Bus Booking System Project Online Bus Booking System, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CriticalCVE-2020-25273online_bus_booking_system_project · online_bus_booking_systemonline_bus_booking_system_project online_bus_booking_systemIn SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.EPSS1.81%6.1MediumCVE-2020-25272online_bus_booking_system_project · online_bus_booking_systemonline_bus_booking_system_project online_bus_booking_systemIn SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.EPSS0.87%9.8CriticalCVE-2020-25889online_bus_booking_system_project · online_bus_booking_systemonline_bus_booking_system_project online_bus_booking_systemOnline Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.EPSS2.76%9.8CriticalCVE-2023-45019online_bus_booking_system_project · online_bus_booking_system +1 moreOnline Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database.EPSS0.70%9.8CriticalCVE-2023-45012online_bus_booking_system_project · online_bus_booking_system +1 moreOnline Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.EPSS0.67%9.8CriticalCVE-2023-45015online_bus_booking_system_project · online_bus_booking_system +1 moreOnline Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.EPSS0.70%9.8CriticalCVE-2023-45018online_bus_booking_system_project · online_bus_booking_system +1 moreOnline Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database.EPSS0.70%