Kjayvik develops a bus ticket reservation system whose vulnerability footprint, though modestly scoped in product breadth, reflects the input-handling and access-control challenges inherent to web-based transactional applications. Its disclosures cluster around application-layer weaknesses including cross-site scripting, cross-site request forgery, SQL injection, and improper access control—patterns that recur across the reservation and ticketing domain and skew toward serious outcomes. Current exploitation activity and severity counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Kjayvik over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2024-42765CRITICAL A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the | Aug 23, 2024 | 9.8 | 28 | NO | NO |
CVE-2024-42764CRITICAL Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php. | Aug 23, 2024 | 9.4 | 27 | NO | NO |
CVE-2024-42766MEDIUM Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php. | Aug 23, 2024 | 5.4 | 18 | NO | NO |
CVE-2024-42761MEDIUM A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbit | Aug 22, 2024 | 6.1 | 18 | NO | NO |
CVE-2024-42763MEDIUM A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to exe | Aug 22, 2024 | 5.4 | 17 | NO | NO |
CVE-2024-42762MEDIUM A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary co | Aug 22, 2024 | 5.4 | 17 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Kjayvik.
Media articles that mention a CVE ID that affects a product developed by Kjayvik — matched by CVE ID, not by vendor name.