CVE-2024-42761

概要

参考情報

• takekaramey/CVE_Writeup · Exploit
• kashipara.com · Product

bus ticket reservation system のその他の脆弱性

• CVE-2024-42766中 5.4Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.
• CVE-2024-42765緊急 9.8A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitra…
• CVE-2024-42764緊急 9.4Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.
• CVE-2024-42763中 5.4A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1…
• CVE-2024-42762中 5.4A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows …