Description
Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Phpjabbers | Bus Reservation System | 1.1 | — |
References
- ExploitDB-51712 exploit
- Product Webpage product
- VulnCheck Advisory: Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter third-party-advisory