Bus Ticket Reservation System@1.0 Security Vulnerabilities and Issues — Bus Ticket Reservation System@1.0 CVE List

Lucene search

KjayvikBus Ticket Reservation System1.0

6 matches found

CVE•added 2024/08/22 9:15 p.m.•53 views

CVE-2024-42763

A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the "bookingdate" parameter.

5.4CVSS6.7AI score0.00142EPSS

CVE•added 2024/08/22 9:15 p.m.•43 views

CVE-2024-42761

A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter.

6.1CVSS6.4AI score0.00157EPSS

CVE•added 2024/08/23 3:15 p.m.•43 views

CVE-2024-42765

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parameters.

9.8CVSS8.9AI score0.00135EPSS

CVE•added 2024/08/23 3:15 p.m.•41 views

CVE-2024-42764

Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.

9.4CVSS7.3AI score0.00074EPSS

CVE•added 2024/08/23 3:15 p.m.•37 views

CVE-2024-42766

Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.

5.4CVSS7.1AI score0.00123EPSS

CVE•added 2024/08/22 9:15 p.m.•36 views

CVE-2024-42762

A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parameter fields.

5.4CVSS6.4AI score0.00142EPSS