CVE-2020-25889

概要

参考情報

• packetstormsecurity.com/files/160397/Online-Bus-Booking-System-Project-Using-PHP-MySQL-1.0-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2020/Dec/4 · Mailing List
• seclists.org/fulldisclosure/2020/Dec/4 · Mailing List
• sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html · Third Party Advisory

online bus booking system のその他の脆弱性

• CVE-2023-45019緊急 9.8Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the cate…
• CVE-2023-45018緊急 9.8Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the incl…
• CVE-2023-45015緊急 9.8Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info…
• CVE-2023-45012緊急 9.8Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bu…
• CVE-2020-25273緊急 9.8In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or passw…