CVE-2020-35378

2020-12-1415:44:23

mitre

www.cve.org

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.2%

JSON

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields.

References

www.exploit-db.com/exploits/49212