kjayvik CVE Vulnerabilities & CVE List (6)

Products (CPE): — CVEs: 6

kjayvik vulnerability overview

Aggregates CVE and security vulnerability intelligence across all kjayvik-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.

Historical issues mainly involve vendor risk cross-site scripting, vendor risk sql injection, and vendor risk csrf and related problems; some flaws may lead to vendor impact session compromise and vendor impact data exposure.

Vulnerability distribution trend (last 24 months)

Showing 16 of 6 CVEs
«« First « Prev Page 1 / 1 Next »
CVE Summary Source Max CVSS EPSS % Published Updated
CVE-2024-42766 Kashipara Bus Ticket Reservation System v1.0 0 is vulnerable to Incorrect Access Control via /deleteTicket.php. [email protected] 5.4 0.30% 2024-08-23 2024-08-26
CVE-2024-42765 A SQL injection vulnerability in "/login.php" of the Kashipara Bus Ticket Reservation System v1.0 allows remote attackers to execute arbitrary SQL commands and bypass Login via the "email" or "password" Login page parameters. [email protected] 9.8 0.69% 2024-08-23 2025-05-06
CVE-2024-42764 Kashipara Bus Ticket Reservation System v1.0 is vulnerable to Cross Site Request Forgery (CSRF) via /deleteTicket.php. [email protected] 9.4 0.30% 2024-08-23 2025-05-06
CVE-2024-42763 A Reflected Cross Site Scripting (XSS) vulnerability was found in the "/schedule.php" page of the Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the "bookingdate" parameter. [email protected] 5.4 0.41% 2024-08-22 2025-05-06
CVE-2024-42762 A Stored Cross Site Scripting (XSS) vulnerability was found in "/history.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via the Name, Phone, and Email parameter fields. [email protected] 5.4 0.41% 2024-08-22 2025-05-06
CVE-2024-42761 A Stored Cross Site Scripting (XSS) vulnerability was found in "/admin_schedule.php" in Kashipara Bus Ticket Reservation System v1.0, which allows remote attackers to execute arbitrary code via scheduleDurationPHP parameter. [email protected] 6.1 0.37% 2024-08-22 2025-05-06
«« First « Prev Page 1 / 1 Next »
cvelogic Threat Intelligence