10 matches found
CVE-2024-42766
Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php...
CVE-2024-42764
Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery CSRF via /deleteTicket.php...
CVE-2024-42764
Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery CSRF via /deleteTicket.php...
CVE-2024-42766: Improper Access Control
Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php...
CVE-2024-42764: Cross-Site Request Forgery (CSRF)
Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery CSRF via /deleteTicket.php...
PT-2024-30134
Name of the Vulnerable Software and Affected Versions Kashipara Bus Ticket Reservation System version 1.0 Online Shopping System version 1.0 Description The issue concerns a Cross Site Request Forgery CSRF vulnerability via the /deleteTicket.php endpoint. This allows for unauthorized actions to b...
CVE-2024-42764
Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery CSRF via /deleteTicket.php...
CVE-2024-42766
Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php...
CVE-2024-42764
Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery CSRF via /deleteTicket.php...
CVE-2024-42764
The Kashipara Bus Ticket Reservation System v1.0 is vulnerable to a Cross-Site Request Forgery (CSRF) vulnerability via the /deleteTicket.php endpoint. The root cause is the failure of the system to adequately verify that requests originate from a trusted user. An attacker can exploit this by for...