Phpjabbers Bus Reservation System vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Phpjabbers Bus Reservation System: 3 record(s), with affected versions and fixes.cpe:2.3:a:phpjabbers:bus_reservation_system
CVE-2025-67651
Medium · 6.9
CWE-352 Jul 31, 2026
CSRF in PHP Jabbers scripts
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in multiple PHP Jabbers scripts. The lack of CSRF tokens or appropriate SameSite attributes allows an attacker to send unauthorized requests in the context of an authenticated user, leading to unauthorized administrative actions, such as creating new admin accounts.
This issue was fixed in the versions specified in the affected products list.
CVE-2025-67650
High · 8.6
CWE-89 Jul 31, 2026
Authenticated SQL Injection in PHP Jabbers scripts
An authenticated SQL injection vulnerability has been identified in multiple PHP Jabbers scripts. Improper neutralization of input provided by an authenticated user into parameters responsible for sorting functions allows an attacker to perform SQL Injection attacks.
This issue was fixed in the versions specified in the affected products list.
CVE-2023-53877
Critical · 9.8
CWE-89 Dec 15, 2025
Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter
Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database.