Lucene search
+L

9127 matches found

CNVD
CNVD
added 2024/08/29 12:00 a.m.40 views

Kashipara Bus Ticket Reservation System Access Control Error Vulnerability

Kashipara Bus Ticket Reservation System is a bus reservation system from Kashipara. An access control error vulnerability exists in Kashipara Bus Ticket Reservation System v1.0, which can be exploited by attackers to cause unauthorized operation...

5.4CVSS6.7AI score0.00296EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/08/29 12:00 a.m.50 views

Kashipara Bus Ticket Reservation System Cross-Site Scripting Vulnerability (CNVD-2024-38206)

Kashipara Bus Ticket Reservation System is a bus reservation system from Kashipara. A cross-site scripting vulnerability exists in Kashipara Bus Ticket Reservation System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in /adminschedule.php, and can be...

6.1CVSS6.2AI score0.0047EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/08/29 12:00 a.m.17 views

Kashipara Bus Ticket Reservation System Cross-Site Scripting Vulnerability (CNVD-2024-38207)

Kashipara Bus Ticket Reservation System is a bus reservation system from Kashipara. A cross-site scripting vulnerability exists in Kashipara Bus Ticket Reservation System v1.0, which stems from the lack of effective filtering and escaping of user-supplied data in the bookingdate parameter of...

5.4CVSS6.5AI score0.0044EPSS
SaveExploits1References1
CNVD
CNVD
added 2024/08/29 12:00 a.m.17 views

Kashipara Bus Ticket Reservation System Cross-Site Request Forgery Vulnerability

Kashipara Bus Ticket Reservation System is a bus reservation system from Kashipara. A cross-site request forgery vulnerability exists in Kashipara Bus Ticket Reservation System v1.0, which stems from /deleteTicket.php not adequately verifying that the request comes from a trusted user, and can be...

9.4CVSS6.6AI score0.00299EPSS
SaveExploits1References1
Patchstack
Patchstack
added 2024/08/28 11:48 a.m.10 views

WordPress Bus Ticket Booking with Seat Reservation plugin <= 5.3.5 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Sharanabasappa Patchstack Alliance in WordPress Plugin Bus Ticket Booking with Seat Reservation versions = 5.3.5...

5.9CVSS6.1AI score0.00278EPSS
SaveExploits0Affected Software1
Patchstack
Patchstack
added 2024/08/28 12:00 a.m.23 views

WordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.3.5 is vulnerable to Cross Site Scripting (XSS)

Software Bus Ticket Booking with Seat Reservation Type Plugin Vulnerable versions = 5.3.5 Fixed in 5.3.6 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43985 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 34dc0c71fc7e Credits Sharanabasapp...

5.9CVSS6.6AI score0.00278EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2024/08/26 3:15 p.m.24 views

CVE-2024-8168

A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS0.00648EPSS
SaveExploits1References5
OSV
OSV
added 2024/08/26 3:15 p.m.10 views

CVE-2024-8168

A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. Th...

9.8CVSS5.8AI score0.00648EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2024/08/26 3:00 p.m.35 views

CVE-2024-8168 code-projects Online Bus Reservation Site login.php sql injection

A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. Th...

7.5CVSS0.00648EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2024/08/26 3:00 p.m.14 views

CVE-2024-8168 code-projects Online Bus Reservation Site login.php sql injection

A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. Th...

7.5CVSS7.3AI score0.00648EPSS
SaveExploits1References5
CVE
CVE
added 2024/08/26 3:00 p.m.65 views

CVE-2024-8168

The CVE-2024-8168 issue affects code-projects Online Bus Reservation Site 1.0, specifically a SQL injection in the login.php file via the Username parameter. The vulnerability is exploitable remotely and has been disclosed publicly. Multiple connected sources (Red Hat, NVD, CVE list, CNVD/CNNVD, ...

9.8CVSS7.5AI score0.00648EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2024/08/26 12:00 a.m.7 views

Online Bus Reservation Site SQL注入漏洞

Online Bus Reservation Site is an online bus reservation site by Fabian Ros Individual Developer. A SQL injection vulnerability exists in Online Bus Reservation Site version 1.0, which is caused by an SQL injection vulnerability in the Username parameter of the login.php page...

9.8CVSS7.8AI score0.00648EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/08/26 12:00 a.m.8 views

PT-2024-38853 · Unknown · Code-Projects Online Bus Reservation Site

Name of the Vulnerable Software and Affected Versions: code-projects Online Bus Reservation Site version 1.0 Description: A critical issue has been found in the code-projects Online Bus Reservation Site, affecting an unknown functionality of the file login.php. The manipulation of the Username...

9.8CVSS7.8AI score0.00648EPSS
SaveExploits1References12
NVD
NVD
added 2024/08/23 3:15 p.m.17 views

CVE-2024-42764

Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery CSRF via /deleteTicket.php...

9.4CVSS0.00299EPSS
SaveExploits1References2
NVD
NVD
added 2024/08/23 3:15 p.m.16 views

CVE-2024-42765

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parameters...

9.8CVSS0.00694EPSS
SaveExploits1References2
OSV
OSV
added 2024/08/23 3:15 p.m.10 views

CVE-2024-42764

Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery CSRF via /deleteTicket.php...

9.4CVSS5.8AI score0.00299EPSS
SaveExploits1References2
NVD
NVD
added 2024/08/23 3:15 p.m.17 views

CVE-2024-42766

Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php...

5.4CVSS0.00296EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/23 3:15 p.m.8 views

CVE-2024-42766

Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php...

5.4CVSS5.8AI score0.00296EPSS
SaveExploits0References2
OSV
OSV
added 2024/08/23 3:15 p.m.7 views

CVE-2024-42765

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parameters...

9.8CVSS6.1AI score0.00694EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2024/08/23 12:00 a.m.20 views

CVE-2024-42765

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parameters...

8.8AI score0.00694EPSS
SaveExploits1References2
Rows per page
Query Builder