cve/2023/CVE-2023-45012.md
2024-05-25 21:48:12 +02:00

857 B

CVE-2023-45012

Description

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'user_email' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.

POC

Reference

No PoCs from references.

Github