Vulnerabilities (CVE)

Filtered by vendor Online Bus Booking System Project Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-25273 1 Online Bus Booking System Project 1 Online Bus Booking System 2021-07-21 7.5 HIGH 9.8 CRITICAL
In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.
CVE-2020-25889 1 Online Bus Booking System Project 1 Online Bus Booking System 2020-12-15 7.5 HIGH 9.8 CRITICAL
Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.