CVE-2020-35378 - SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields

Back Back to CVE browser

CRITICAL

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields

Published Dec 14, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.05%

Description

SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23054
Advisory
https://www.exploit-db.com/exploits/49212
x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-23054		Advisory
https://www.exploit-db.com/exploits/49212		x_refsource_MISCExploitThird Party AdvisoryVDB Entry