THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-55740 (CRITICAL 9.8) — Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in bus_info.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query (select * from bus_

[NVD] CVE-2026-55740 (CRITICAL 9.8) — Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in bus_info.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query (select * from bus_

lownvdPublished 2026-06-18

CVE-2026-55740 CVSS: 9.8 CRITICAL Published: 2026-06-18T06:16:57.917

Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in bus_info.php. The busid parameter received via HTTP POST is concatenated directly into a MySQL query (select * from bus_info where id=) without sanitization, escaping, or

Indicators of compromise

459cabdbeb99c00225b26e46e3c2c30ae1de7badsha1
CVE-2026-55740cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-55740