CVE-2023-45018

CVE-2023-45018 affects Online Bus Booking System v1.0. The vulnerability is an unauthenticated SQL injection in the username parameter of includes/login.php due to unfiltered input. Root cause: lack of input validation leads to SQL injection; impact is high for confidentiality, integrity, and ava...

CVE-2023-45017

The connected PT-2023-29358 entry identifies CVE-2023-45017 as an unauthenticated SQL Injection in Online Bus Booking System v1.0, caused by lack of validation on the destination parameter in search.php. This allows unfiltered input to reach the database; impact could include data disclosure or m...

CVE-2023-45016

PT-Security document reports CVE-2023-45016 context linked to Online Bus Booking System. Affected software: Online Bus Booking System version 1.0. Vulnerability: multiple unauthenticated SQL Injection flaws where the value of the source parameter in search.php is not validated and is passed unfil...

CVE-2023-45015 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45015

CVE-2023-45015 relates to the Online Bus Booking System v1.0, which is vulnerable to multiple unauthenticated SQL injection flaws. The root cause, as stated across sources, is that the date parameter in the bus_info.php resource is not properly validated or filtered before being sent to the datab...

CVE-2023-45015 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45014

Online Bus Booking System (version 1.0) is affected by unauthenticated SQL injection via the bus info.php bus id parameter that is not validated before sending to the database. This vulnerability could allow an attacker to manipulate queries and access or alter data. The report from PT-Security c...

CVE-2023-45012

The CVE-2023-45012 entry concerns Online Bus Booking System v1.0, with a vulnerable component in bus_info.php where the user_email parameter is not properly validated, allowing unauthenticated SQL injection. The issue is described as multiple unauthenticated SQL injection vulnerabilities, with CV...

CVE-2023-45012 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'useremail' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-45012 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'useremail' parameter of the businfo.php resource does not validate the characters received and they are sent unfiltered to the database...

Online Bus Booking System SQL Injection Vulnerability

Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which is caused by insufficient filtering of the useremail parameter on the businfo.php page, resulting in a SQL injection vulnerability...

PT-2023-29357 · Unknown · Online Bus Booking System

Name of the Vulnerable Software and Affected Versions: Online Bus Booking System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the source parameter of the "search.php" resource does not validate the characters received and they a...

Online Bus Booking System SQL Injection Vulnerability

Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which is caused by the category parameter of the category.php page not being sufficiently filtered, resulting in an SQL injection vulnerability...

PT-2023-29356 · Unknown · Online Bus Booking System

Name of the Vulnerable Software and Affected Versions: Online Bus Booking System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the date parameter of the "bus info.php" resource does not validate the characters received, and they...

Number withdrawn

Online Bus Booking System is an online bus booking system. This CVE number has been withdrawn...

Number withdrawn

Online Bus Booking System is an online bus booking system. This CVE number has been withdrawn...

Online Bus Booking System SQL Injection Vulnerability

Online Bus Booking System is an online bus booking system. A SQL injection vulnerability exists in Online Bus Booking System v1.0, which originates from the date parameter of the businfo.php page not being sufficiently filtered, resulting in a SQL injection vulnerability...

Sql injection

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...

CVE-2020-25889

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege...

CVE-2020-25889

CVE-2020-25889 affects the Online Bus Booking System Project Using PHP/MySQL v1.0. The login page is vulnerable to SQL injection due to improper input handling, allowing an attacker to bypass authentication and potentially gain admin privileges. Multiple sources (NVD, Red Hat advisory, PRION, CVE...