5 matches found
CVE-2024-42761
A Stored Cross Site Scripting XSS vulnerability was found in "/adminschedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter...
CVE-2024-42761
A Stored Cross Site Scripting XSS vulnerability was found in "/adminschedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter...
CVE-2024-42761
CVE-2024-42761 : A Stored XSS vulnerability exists in Kashipara Bus Ticket Reservation System v1.0, exploitable via the /admin_schedule.php endpoint and the scheduleDurationPHP parameter. Connected documents consistently describe a lack of proper input validation/escaping in this endpoint, enabli...
CVE-2024-42761
A Stored Cross Site Scripting XSS vulnerability was found in "/adminschedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter...
CVE-2024-42761
A Stored Cross Site Scripting XSS vulnerability was found in "/adminschedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter...