CVEs (6)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Kjayvik 1Bus Ticket Reservation System Aug 26, 2024 Aug 23, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php. |
1Kjayvik 1Bus Ticket Reservation System May 6, 2025 Aug 23, 2024 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parame...Show more |
1Kjayvik 1Bus Ticket Reservation System May 6, 2025 Aug 23, 2024 N/A· v4 9.4 CRITICAL· v3 N/A· v2 Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php. |
1Kjayvik 1Bus Ticket Reservation System May 6, 2025 Aug 22, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the "bookingdate...Show more |
1Kjayvik 1Bus Ticket Reservation System May 6, 2025 Aug 22, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parame...Show more |
1Kjayvik 1Bus Ticket Reservation System May 6, 2025 Aug 22, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parame...Show more |