Online Bus Booking System

online_bus_booking_system

Vendor: Online Bus Booking System Project • 7 CVEs

CVEs (7)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-45019 1Online Bus Booking System Project 1Online Bus Booking System Jun 17, 2026 Nov 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent un...Show more Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database. Show less
CVE-2023-45018 1Online Bus Booking System Project 1Online Bus Booking System Jun 17, 2026 Nov 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are s...Show more Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database. Show less
CVE-2023-45015 1Online Bus Booking System Project 1Online Bus Booking System Jun 17, 2026 Nov 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfilt...Show more Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. Show less
CVE-2023-45012 1Online Bus Booking System Project 1Online Bus Booking System Jun 17, 2026 Nov 2, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent...Show more Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database. Show less
CVE-2020-25889 1Online Bus Booking System Project 1Online Bus Booking System Jun 17, 2026 Dec 8, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privil...Show more Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.Show less
CVE-2020-25273 1Online Bus Booking System Project 1Online Bus Booking System Jun 17, 2026 Oct 8, 2020 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.
CVE-2020-25272 1Online Bus Booking System Project 1Online Bus Booking System Jun 17, 2026 Oct 8, 2020 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.