An independent investigator finds a flaw in the ‘Online Bus Ticket Reservation 1.0’ platform. It is a software for the sale of transport tickets, developed in open source to be used by bus companies, whether urban or interurban -for example: Abhibus, Red Bus, Travelyari, APSRTC, TSRTC, Goibibo, Yatra, Makemytrip, Yatragenie… -. A failure in the authentication procedure allows access to the service by entering a simple code in the username and password fields, so the attacker does not need to create a user account on the platform.