CVE-2024-8168 – code-projects Online Bus Reservation Site login.php sql injection

https://notcve.org/view.php?id=CVE-2024-8168

A vulnerability was found in code-projects Online Bus Reservation Site 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. • https://code-projects.org https://github.com/t4rrega/cve/issues/2 https://vuldb.com/?ctiid.275767 https://vuldb.com/?id.275767 https://vuldb.com/?submit.397715 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •