49 matches found
SourceCodester Online Bus Booking System SQL Injection (CVE-2020-25273)
An SQL injection vulnerability exists in SourceCodester Online Bus Booking System. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2020-25272
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
CVE-2020-25272
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
Design/Logic Flaw
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
CVE-2020-25273
In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...
CVE-2020-25273
The CVE-2020-25273 entry concerns SourceCodester Online Bus Booking System 1.0 with an authentication bypass on the Admin Login. The connected exploit repository provides concrete details: the vulnerability resides in the login flow (admin.php/login_auth.php) and is triggered via SQL injection in...
CVE-2020-25272
CVE-2020-25272 corresponds to an XSS vulnerability in SourceCodester Online Bus Booking System 1.0, triggered via the name parameter in book_now.php. The available connected documents confirm the affected product and the vulnerability vector, but do not provide details on the exploitation status,...
