Vulnerability · Published Dec 15, 2025 · Assigned by VulnCheck
CVE-2023-53877Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter
Critical 9.3
In plain English
A critical-severity SQL injection in Bus Reservation System from Phpjabbers. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities).
Severity (CVSS 4.0)9.3Critical
Exploit odds (30 days)0.4%top 60.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Phpjabbers | Bus Reservation System | 1.1 |
Weakness: CWE-89 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
References
- ExploitDB-51712 exploit
- Product Webpage product
- VulnCheck Advisory: Bus Reservation System 1.1 Multiple SQL Injection via pickup_id Parameter third-party-advisory