CVEvulnerability
CVE-2020-35378
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2020-12-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields.
Affected configurations
• online bus ticket reservation project online bus ticket reservation 1.0
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://www.exploit-db.com/exploits/49212 Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/49212 Exploit, Third Party Advisory, VDB Entry