Bus Ticket Booking System vulnerabilities | LiveThreat CVE Feed

Product

Bus Ticket Booking System

by Codeastro · last CVE Apr 28, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 1Low 0

Severity

Exploitation

Watch

Add Bus Ticket Booking System to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-25775	9.8	1%	Apr 25	Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder Affected: 1.0
CVE-2025-25777	8.0	0%	Apr 24	Insecure Direct Object Reference (IDOR) in Codeastro Bus Ticket Booking System v1.0 allows unauthorized access to user profiles Affected: 1.0
CVE-2025-25776	5.0	0%	Apr 28	Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute… Affected: 1.0