CVE-2023-53877
CriticalSummary
Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database.
Risk Assessment
The risk includes unauthorized access to database data, potentially leading to leakage of sensitive information such as customer data.
Recommendation
Immediately implement fixes, such as using parameterized queries or input validation, and update the system.
Original NVD description (English source)
Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database.