CVE-2023-45015

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'date' parameter of the bus_info.php resource does not validate the characters received and they are sent unfiltered to the database.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
Projectworlds Pvt. LimitedOnline Bus Booking System1.0

References

Timeline

Published
Nov 2, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-450189.8Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'username' parameter of the inclCVE-2023-450199.8Online Bus Booking System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'category' parameter of the cateCVE-2023-45024.8The Translate WordPress with GTranslate WordPress plugin before 3.0.4 does not sanitise and escape some of its settings, which could allow hCVE-2023-450234.2The femanager extension 7 before 7.2.2 for TYPO3 has Incorrect Access Control: it lacks a check for permissions for the invitation componentCVE-2023-450247.5Best Practical Request Tracker (RT) 5 before 5.0.5 allows Information Disclosure via a transaction search in the transaction query builder.CVE-2023-450259.8An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability coCVE-2023-450264.9A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allCVE-2023-450274.9A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allCVE-2023-450284.9An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulCVE-2023-45037.5An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers areCVE-2023-450357.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,CVE-2023-450367.2A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited,
CVE-2023-45015: Critical severity, CVSS 9.8 | Vulnix