CVE-2023-45013

02 Jan 2024, 19:15

Type	Values Removed	Values Added
CWE	CWE-89
CPE	cpe:2.3:a:online_bus_booking_system_project:online_bus_booking_system:1.0:*:*:*:*:*:*:*
Summary	Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_query' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.	Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
References	{'url': 'https://fluidattacks.com/advisories/oconnor', 'name': 'https://fluidattacks.com/advisories/oconnor', 'tags': ['Exploit', 'Third Party Advisory'], 'refsource': 'MISC'} {'url': 'https://projectworlds.in/', 'name': 'https://projectworlds.in/', 'tags': ['Product'], 'refsource': 'MISC'}
CVSS	v2 : unknown v3 : 9.8	v2 : unknown v3 : unknown

---

08 Nov 2023, 23:13

Type	Values Removed	Values Added
CPE		cpe:2.3:a:online_bus_booking_system_project:online_bus_booking_system:1.0:*:*:*:*:*:*:*
First Time		Online Bus Booking System Project Online Bus Booking System Project online Bus Booking System
References	(MISC) https://fluidattacks.com/advisories/oconnor -	(MISC) https://fluidattacks.com/advisories/oconnor - Exploit, Third Party Advisory
References	(MISC) https://projectworlds.in/ -	(MISC) https://projectworlds.in/ - Product

---

02 Nov 2023, 03:15

Type	Values Removed	Values Added
New CVE

---