Security Advisory

CVE-2024-42765

9.8
CRITICAL

Vulnerability Description

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parameters.
Published Date August 23, 2024
Official Source NIST NVD Advisory