CVE-2023-45019

9.8 criticalEPSS 0.7%

Critical (9.8) in online bus booking system project online bus booking system. EPSS 0.7% chance of exploitation in the next 30 days.

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the category.php resource does not validate the characters received and they are sent unfiltered to the database.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-11-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

online_bus_booking_system_project:online_bus_booking_system

References

https://fluidattacks.com/advisories/oconnor
https://projectworlds.in/
https://fluidattacks.com/advisories/oconnor
https://projectworlds.in/

Check your stack JSON