CVE-2023-45019 — Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

CVE-2023-45019

Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi) PUBLISHED

Description (CNA)

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database.

Affected (CNA)

Vendor / product	Versions
Projectworlds Pvt. Limited / Online Bus Booking System	affected 1.0

CWE

CWE-89

References

https://fluidattacks.com/advisories/oconnor
https://projectworlds.in/

ADP enrichment

CVE

No English description supplied.

https://fluidattacks.com/advisories/oconnor
https://projectworlds.in/

CISA-ADP

No English description supplied.

No references supplied.