Published: 08/12/2020 Updated: 15/12/2020

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.

Vulnerable Product	Search on Vulmon	Subscribe to Product
online bus booking system project online bus booking system 1.0

Online Bus Booking System Project using PHP MySQL version 10 suffers from a remote SQL injection vulnerability that allows for authentication bypass ...

Dear Team, Please find attached POC and detailed information for CVE-2020-25889 & CVE-2020-25955 For CVE-2020-25889: # Exploit Title: online bus booking system project using PHP MySQL - SQL Injection # Exploit Author: Krishna Yadav # Vendor Homepage: wwwsourcecodestercom # Software Link: wwwsourcecodestercom/php/14438/onl ...

CWE-89 https://www.sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html https://seclists.org/fulldisclosure/2020/Dec/4 http://seclists.org/fulldisclosure/2020/Dec/4 http://packetstormsecurity.com/files/160397/Online-Bus-Booking-System-Project-Using-PHP-MySQL-1.0-SQL-Injection.html https://nvd.nist.gov http://seclists.org/fulldisclosure/2020/Dec/4

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-25889

Vulnerability Summary

Vulnerability Trend

Exploits

Mailing Lists

References

Vulmon Search

About

Products

Connect