Bus Reservation System vulnerabilities

3 known vulnerabilities in Bus Reservation System from Phpjabbers. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Bus Reservation System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-53877Dec 15, 2025Phpjabbers

  Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal informat

• 8.8 High severity

  Bus Reservation System: Improper Neutralization of Formula Elements in a CSV File

  CVE-2023-51319Feb 20, 2025Phpjabbers

  PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient input validation on Languages section Labels any parameters field in System Option

• 7.5 High severity

  Bus Reservation System: Uncontrolled Resource Consumption

  CVE-2023-51316Feb 20, 2025Phpjabbers

  A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows attackers to send an excessive amount of email for a legitimate user, leading to a possible Denial of Service (DoS) via a large amount of generated e-mail