5 matches found
Design/Logic Flaw
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
CVE-2020-25273
In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...
CVE-2020-25272
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...
CVE-2020-25273: Improper Neutralization of Special Elements used in an SQL Command
In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection...
CVE-2020-25272: Improper Neutralization of Input During Web Page Generation
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in booknow.php...