CVE-2024-42765

9.8 criticalEPSS 0.7%

Critical (9.8) in kjayvik bus ticket reservation system. EPSS 0.7% chance of exploitation in the next 30 days.

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parameters.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-11-01)
CWE: CWE-89
Published: 2024-08-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

kjayvik:bus_ticket_reservation_system

References

https://github.com/takekaramey/CVE_Writeup/blob/main/Kashipara/Bus%20Ticket%20Reservation%20System%20v1.0/SQL%20Injection%20-%20Login.pdf
https://www.kashipara.com/

Check your stack JSON