Security Advisory
CVE-2020-35378
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL Injection in the login page in Online Bus Ticket Reservation 1.0 allows attackers to execute arbitrary SQL commands and bypass authentication via the username and password fields.