CVE-2023-45015

CVE-2023-45015 relates to the Online Bus Booking System v1.0, which is vulnerable to multiple unauthenticated SQL injection flaws. The root cause, as stated across sources, is that the date parameter in the bus_info.php resource is not properly validated or filtered before being sent to the datab...

CVE-2023-45018

CVE-2023-45018 affects Online Bus Booking System v1.0. The vulnerability is an unauthenticated SQL injection in the username parameter of includes/login.php due to unfiltered input. Root cause: lack of input validation leads to SQL injection; impact is high for confidentiality, integrity, and ava...

CVE-2023-45019

CVE-2023-45019 affects Online Bus Booking System v1.0 and is tied to unauthenticated SQL Injection in the category parameter of category.php. The vulnerability arises because input is not properly validated or filtered before being sent to the database, enabling potential attackers to manipulate ...

CVE-2023-45012

The CVE-2023-45012 entry concerns Online Bus Booking System v1.0, with a vulnerable component in bus_info.php where the user_email parameter is not properly validated, allowing unauthenticated SQL injection. The issue is described as multiple unauthenticated SQL injection vulnerabilities, with CV...

CVE-2020-25273

The CVE-2020-25273 entry concerns SourceCodester Online Bus Booking System 1.0 with an authentication bypass on the Admin Login. The connected exploit repository provides concrete details: the vulnerability resides in the login flow (admin.php/login_auth.php) and is triggered via SQL injection in...

CVE-2020-25889

CVE-2020-25889 affects the Online Bus Booking System Project Using PHP/MySQL v1.0. The login page is vulnerable to SQL injection due to improper input handling, allowing an attacker to bypass authentication and potentially gain admin privileges. Multiple sources (NVD, Red Hat advisory, PRION, CVE...

CVE-2020-25272

CVE-2020-25272 corresponds to an XSS vulnerability in SourceCodester Online Bus Booking System 1.0, triggered via the name parameter in book_now.php. The available connected documents confirm the affected product and the vulnerability vector, but do not provide details on the exploitation status,...