Kjayvik Bus Ticket Reservation System — known CVE vulnerabilities

Every CVE whose affected-product data names Kjayvik Bus Ticket Reservation System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2024-42765 — CVSS 9.8 (critical): A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute…
• CVE-2024-42764 — CVSS 9.4 (critical): Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php.
• CVE-2024-42761 — CVSS 6.1 (medium): A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which…
• CVE-2024-42762 — CVSS 5.4 (medium): A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows…
• CVE-2024-42763 — CVSS 5.4 (medium): A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System…
• CVE-2024-42766 — CVSS 5.4 (medium): Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php.