CVE-2020-25273

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p77

Published

Oct 8, 2020 (Oct 8, 2020)

Modified

Jun 17, 2026

Description

In SourceCodester Online Bus Booking System 1.0, there is Authentication bypass on the Admin Login screen in admin.php via username or password SQL injection.

Vendors: online bus booking system project
Products: online bus booking system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.