CVE-2023-45015 describes multiple unauthenticated SQL Injection vulnerabilities in Online Bus Booking System v1.0, specifically impacting the 'date' parameter within the bus_info.php resource due to insufficient input validation. This vulnerability carries a critical CVSS score of 9.8, indicating it is easily exploitable over the network with no authentication required, potentially leading to full compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation (KEV: No), exploit intelligence shows no public Metasploit or ExploitDB modules, and community discussion is minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:online_bus_booking_system_project:online_bus_booking_system:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.