What’s Vulnerable › Vulnerabilities
CVE-2020-25889
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.8% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-12-08 · updated 2026-06-17
- Weakness: CWE-89
Description
Online Bus Booking System Project Using PHP/MySQL version 1.0 has SQL injection via the login page. By placing SQL injection payload on the login page attackers can bypass the authentication and can gain the admin privilege.
Affected products
References
- http://packetstormsecurity.com/files/160397/Online-Bus-Booking-System-Project-Using-PHP-MySQL-1.0-SQL-Injection.html
- http://seclists.org/fulldisclosure/2020/Dec/4
- https://seclists.org/fulldisclosure/2020/Dec/4
- https://www.sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html
- http://packetstormsecurity.com/files/160397/Online-Bus-Booking-System-Project-Using-PHP-MySQL-1.0-SQL-Injection.html
- http://seclists.org/fulldisclosure/2020/Dec/4
- https://seclists.org/fulldisclosure/2020/Dec/4
- https://www.sourcecodester.com/php/14438/online-bus-booking-system-project-using-phpmysql.html
Get alerted when CVE-2020-25889 or the next vulnerability affects your stack