CVE-2022-35156

CriticalCVSS 9.8

Published: 30/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.10%

62th percentile - higher than 62% of all known CVEs

Summary

Bus Pass Management System 1.0 was found to have a SQL injection vulnerability in the searchdata parameter at /buspassms/download-pass.php. An attacker can exploit this flaw to execute arbitrary SQL queries on the database.

Risk Assessment

The risk involves unauthorized access to sensitive data, such as user personal information, and potential modification or deletion of database records.

Recommendation

Immediately update the system to the latest version or apply a security patch. Additionally, validate and sanitize all input data, especially the searchdata parameter.

Original NVD description (English source)

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php..