Lucene search
K

16 matches found

CNVD
CNVD
added 2025/06/27 12:0 a.m.2 views

Bus Pass Management System admin-profile.php file cross-site scripting vulnerability

Bus Pass Management System is a bus pass management system. Bus Pass Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data by the profile name parameter in the file /admin/admin-profile.php, which can...

5.4CVSS4.1AI score0.00239EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/09 12:0 a.m.2 views

Bus Pass Management System view-pass-detail.php File SQL Injection Vulnerability

Bus Pass Management System is a bus pass management system. Bus Pass Management System suffers from a SQL injection vulnerability that originates from a missing validation of an externally entered SQL statement in the viewid parameter of the view-pass-detail.php file. An attacker can exploit this...

9.8CVSS8.1AI score0.00478EPSS
Exploits1References1
OSV
OSV
added 2025/04/03 7:15 a.m.4 views

CVE-2025-3146

A vulnerability, which was classified as critical, was found in PHPGurukul Bus Pass Management System 1.0. This affects an unknown part of the file /view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

9.8CVSS5.7AI score0.00478EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2025/04/03 6:31 a.m.3 views

CVE-2025-3146 PHPGurukul Bus Pass Management System view-pass-detail.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Bus Pass Management System 1.0. This affects an unknown part of the file /view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit ha...

7.5CVSS7.2AI score0.00478EPSS
Exploits1References5
CNVD
CNVD
added 2024/09/18 12:0 a.m.2 views

Bus Pass Management System pass-bwdates-reports-details.php file cross-site scripting vulnerability

Bus Pass Management System is a bus pass management system. Bus Pass Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the fromdate and todate parameters in the...

6.3CVSS6.5AI score0.00309EPSS
Exploits1References1
OSV
OSV
added 2024/09/13 4:15 p.m.2 views

CVE-2024-44798

phpgurukul Bus Pass Management System 1.0 is vulnerable to Cross-site scripting XSS in /admin/pass-bwdates-reports-details.php via fromdate and todate parameters...

4.8CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2022/09/30 12:0 a.m.3 views

Bus Pass Management System SQL注入漏洞

Bus Pass Management System is a bus pass management system. Bus Pass Management System v1.0 has a SQL injection vulnerability, which stems from an SQL injection vulnerability found to be contained in the searchdata parameter...

9.8CVSS8.4AI score0.01272EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2022/08/22 1:15 a.m.2 views

CVE-2022-36198

Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and...

9.8CVSS7.4AI score0.00988EPSS
Exploits1References3
OSV
OSV
added 2022/08/22 1:15 a.m.3 views

CVE-2022-36198

Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and...

9.8CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/08/22 12:0 a.m.4 views

PT-2022-23255 · Unknown · Bus Pass Management System

Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0 Description: Multiple SQL injections were detected in the Bus Pass Management System. The issue affects several API endpoints, including "buspassms/admin/view-enquiry.php",...

9.8CVSS9.7AI score0.00988EPSS
Exploits1References5
CNNVD
CNNVD
added 2022/08/21 12:0 a.m.3 views

Bus Pass Management System SQL注入漏洞

Bus Pass Management System is a bus pass management system. A security vulnerability exists in Bus Pass Management System version 1.0, which is caused by multiple SQL injections...

9.8CVSS8.6AI score0.00988EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2022/05/11 12:0 a.m.7 views

PT-2022-19362 · Unknown · Bus Pass Management System

Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0 Description: An insecure direct object reference IDOR vulnerability in the viewid parameter allows attackers to access sensitive information. Recommendations: For Bus Pass Management System version 1.0,...

6.5CVSS6.3AI score0.01238EPSS
Exploits1References5
OSV
OSV
added 2021/12/16 7:15 p.m.2 views

CVE-2021-44315

In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to view the sensitive files of the application, for example: Any file which contains sensitive information of the user or server...

7.5CVSS5.8AI score0.0168EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/12/16 12:0 a.m.2 views

Bus Pass Management System 跨站脚本漏洞

Bus Pass Management System is a bus pass management system. v1.0 of Bus Pass Management System is vulnerable to a cross-site scripting vulnerability that stems from the lack of data validation filtering of user-supplied data and output in the parameters pagedes and About Us. An attacker could...

5.4CVSS5.6AI score0.00544EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/12/16 12:0 a.m.5 views

Bus Pass Management System 安全漏洞

Bus Pass Management System is a bus pass management system. v1.0 of Bus Pass Management System is vulnerable to information disclosure, which stems from a configuration error in the network system or product during operation. The vulnerability can be exploited by an attacker to view the applicati...

7.5CVSS5.6AI score0.0168EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2021/12/16 12:0 a.m.9 views

PT-2021-24080 · Unknown · Bus Pass Management System

Name of the Vulnerable Software and Affected Versions: Bus Pass Management System version 1.0 Description: The issue is related to a Stored Cross-site scripting vulnerability. Parameters pagedes and About Us are affected. Recommendations: For Bus Pass Management System version 1.0, consider...

5.4CVSS5.2AI score0.00544EPSS
Exploits1References5
Rows per page
Query Builder