Skip to content
OpenAdvisories

Vendor

Nur-Alam39

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.8

    SQL Injection in Nur-Alam39 bus-ticket bus_info.php via busid parameter

    Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in bus_info.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL quer…