Codeastro Bus Ticket Booking System
3 CVEs affecting Codeastro Bus Ticket Booking System. Latest disclosed: 2025-04-28. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-25775 | Critical | 9.8 | 2025-04-25 | Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder. |
CVE-2025-25777 | High | 8.0 | 2025-04-24 | Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles. By manipulating the user ID in… |
CVE-2025-25776 | Medium | 5.0 | 2025-04-28 | Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attack… |