Approved changes feed: RSS · Atom

cpe:2.3:a:phpgurukul:bus_pass_management_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPhpgurukul (43390843-85b8-5d5e-9218-29dc10c3657d)
ProductBus Pass Management System (52593fc9-c156-5a89-9654-1bd104530a46)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-3146 vulnerable 2026-06-08 07:23:08.259831 PHPGurukul Bus Pass Management System view-pass-detail.php sql injection
HIGH (7.3)
A vulnerability, which was classified as critical, was found in PHPGurukul Bus Pass Management System 1.0. This affects an unknown part of the file /view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-04-03T06:31:14.559Z
Updated: 2025-11-11T18:14:01.314Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-36198 vulnerable 2026-06-08 05:46:06.436842 Details available
Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and buspassms/admin/edit-pass-detail.php
Published: 2022-08-22T00:31:13.000Z
Updated: 2024-08-03T10:00:04.197Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35156 vulnerable 2026-06-08 05:46:04.218654 Details available
Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php..
Published: 2022-09-30T18:10:01.000Z
Updated: 2026-07-09T00:19:59.406Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-35155 vulnerable 2026-06-08 05:46:04.218120 Details available
Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter.
Published: 2022-09-30T18:10:11.000Z
Updated: 2026-07-09T00:19:58.185Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-29008 vulnerable 2026-06-08 05:42:46.314219 Details available
An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information.
Published: 2022-05-11T13:08:03.000Z
Updated: 2024-08-03T06:10:58.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44317 vulnerable 2026-06-08 05:36:45.662734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44315 vulnerable 2026-06-08 05:36:45.662217 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.