CVE-2023-53877

Critical · 9.8

CVSS

9.8

EPSS

0.4%

Published

Dec 15, 2025

CISA due date

—

The record

Bus Reservation System 1.1 contains a SQL injection vulnerability in the pickup_id parameter that allows attackers to manipulate database queries. Attackers can exploit boolean-based, error-based, and time-based blind SQL injection techniques to steal information from the database.

Affected packages

Ecosystem	Package	Introduced	Fixed