CVE-2020-25273

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.
References
Link Resource
https://github.com/Ko-kn3t/CVE-2020-25273 Exploit Third Party Advisory
https://www.sourcecodester.com Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:online_bus_booking_system_project:online_bus_booking_system:1.0:*:*:*:*:*:*:*

Information

Published : 2020-10-08 06:15

Updated : 2021-07-21 04:39


NVD link : CVE-2020-25273

Mitre link : CVE-2020-25273


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

online_bus_booking_system_project

  • online_bus_booking_system