PatchTheCVEbus reservation system vulnerabilities and fixes
Recent CVEs affecting bus reservation system, with upgrade or downgrade steps. 5 tracked.
Also searched as: busreservationsystem.
bus reservation system has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-15. Highest priority: CVE-2023-53877 (score 54/100).
- CVE-2025-3139 MEDIUM 5.3 DOWNGRADE A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical
- CVE-2023-53877 CRITICAL 9.8 DOWNGRADE Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attac
- CVE-2023-51319 HIGH 8.8 DOWNGRADE PHPJabbers Bus Reservation System v1.1 is vulnerable to CSV Injection vulnerability which allows an attacker t
- CVE-2023-51318 MEDIUM 5.4 DOWNGRADE PHPJabbers Bus Reservation System v1.1 is vulnerable to Multiple Stored Cross-Site Scripting (XSS) in the "tit
- CVE-2023-51316 HIGH 7.5 DOWNGRADE A lack of rate limiting in the 'Forgot Password' feature of PHPJabbers Bus Reservation System v1.1 allows atta
FAQ
How do I fix bus reservation system vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bus reservation system being exploited right now?
None of the tracked bus reservation system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bus reservation system CVE should I patch first?
CVE-2023-53877 currently ranks highest (54/100): Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attac.