Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (3 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2020-25889 1 Online Bus Booking System Project 1 Online Bus Booking System 2024-11-21 9.8 Critical
Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.
CVE-2020-25273 1 Online Bus Booking System Project 1 Online Bus Booking System 2024-11-21 9.8 Critical
In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.
CVE-2020-25272 1 Online Bus Booking System Project 1 Online Bus Booking System 2024-11-21 6.1 Medium
In SourceCodester Online Bus Booking System 1.0, there is XSS through the name parameter in book_now.php.