Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2023-53877

Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter

Description

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Phpjabbers Bus Reservation System

  • 1.1affected

References