Skip to content
OpenAdvisories
Unscored CVE-2020-35378 EUVD-2020-23054GHSA-53xh-4grp-ggrw

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authenti…

Published Dec 14, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields.

References