CVE-2022-35156: Phpgurukul Bus Pass Management System

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php..

Affected products

• Phpgurukul Bus Pass Management System: version 1.0 only

Published 2022-09-30. Last modified 2026-07-09.