Sql injection

2023-11-0203:15:00

PRIOn knowledge base

www.prio-n.com

vulnerable system

unauthenticated

sql injection

user email parameter

bus booking

database.

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.1%

JSON

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The ‘user_email’ parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.

CPENameOperatorVersion
online_bus_booking_systemeq1.0

CPE	Name	Operator	Version
	online_bus_booking_system	eq	1.0

References

fluidattacks.com/advisories/oconnor

projectworlds.in/