PT-2020-16056
CVE-2020-25273
·
Published
2020-10-08
·
Updated
2021-07-21
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
SourceCodester Online Bus Booking System version 1.0
Description
The issue concerns an authentication bypass on the Admin Login screen. This is achieved through SQL injection in the
username or password fields in the admin.php file.Recommendations
For SourceCodester Online Bus Booking System version 1.0, consider implementing proper input validation and sanitization to prevent SQL injection attacks, and ensure that authentication mechanisms are secure to prevent bypass.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾