CVE-2025-25775: Codeastro Bus Ticket Booking System

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Codeastro Bus Ticket Booking System v1.0 is vulnerable to SQL injection via the kodetiket parameter in /BusTicket-CI/tiket/cekorder.

Affected products

• Codeastro Bus Ticket Booking System: version 1.0 only

Published 2025-04-25. Last modified 2026-06-17.