BP
Product
Bus Pass Management System
8
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 1Medium 4Low 0
Watch
Add Bus Pass Management System to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3146 | 9.8 | Apr 3 | PHPGurukul Bus Pass Management System view-pass-detail.php sql injection Affected: 1.0 |
| CVE-2022-35156 | 9.8 | Sep 30 | Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php Affected: 1.0 |
| CVE-2022-36198 | 9.8 | Aug 22 | Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php,… Affected: 1.0 |
| CVE-2021-44315 | 7.5 | Dec 16 | In Bus Pass Management System v1.0, Directory Listing/Browsing is enabled on the web server which allows an attacker to view the sensitive files of the application, for example:… Affected: 1.0 |
| CVE-2022-29008 | 6.5 | May 11 | An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information Affected: 1.0 |
| CVE-2022-35155 | 6.1 | Sep 30 | Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter Affected: 1.0 |
| CVE-2025-6288 | 5.4 | Jun 20 | PHPGurukul Bus Pass Management System Profile Page admin-profile.php cross site scripting Affected: 1.0 |
| CVE-2021-44317 | 5.4 | Dec 16 | In Bus Pass Management System v1.0, parameters 'pagedes' and `About Us` are affected with a Stored Cross-site scripting vulnerability Affected: 1.0 |
Showing 8