Online Bus Booking System vulnerabilities
4 known vulnerabilities in Online Bus Booking System from Projectworlds Pvt.. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
Online Bus Booking System: Improper Neutralization of Special Elements used in an SQL Command
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database.
- 9.8 Critical severity
Online Bus Booking System: Improper Neutralization of Special Elements used in an SQL Command
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the includes/login.php resource does not validate the characters received and they are sent unfiltered to the database.
- 9.8 Critical severity
Online Bus Booking System: Improper Neutralization of Special Elements used in an SQL Command
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.
- 9.8 Critical severity
Online Bus Booking System: Improper Neutralization of Special Elements used in an SQL Command
Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.