https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T13:53:09.836545+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-55740 CVE-2026-55740 — SQL Injection in Nur-Alam39 bus-ticket bus_info.php via busid parameter 2026-10-15T13:53:09.837774+00:00

Affected: Nur-Alam39 bus-ticket

Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in bus_info.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query (select * from bus_info where id=) without sanitization, escaping, or parameterization, and in a numeric (unquoted) context.