CVE-2024-42765

概要

参考情報

• takekaramey/CVE_Writeup · Exploit
• kashipara.com · Product

bus ticket reservation system のその他の脆弱性

• CVE-2024-42766中 5.4Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.
• CVE-2024-42764緊急 9.4Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.
• CVE-2024-42763中 5.4A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1…
• CVE-2024-42762中 5.4A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows …
• CVE-2024-42761中 6.1A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which …