PT-2020-17319
CVE-2020-35378
·
Published
2020-12-14
·
Updated
2020-12-14
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Online Bus Ticket Reservation version 1.0
Description
The issue allows attackers to execute arbitrary SQL commands and bypass authentication via the
username and password fields in the login page.Recommendations
For Online Bus Ticket Reservation version 1.0, as a temporary workaround, consider restricting access to the login page or validating and sanitizing user input for the
username and password fields to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾