← Database

CVE-2024-42765

CRITICAL CVSS: 9.8 Published: 2024-08-23 Modified: 2026-06-17

Description

A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parameters.

Affected Platforms

Kjayvik Bus Ticket Reservation System

Weakness Type

CWE-89

References