Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09314
HistoryJan 25, 2022 - 12:00 a.m.

SourceCodester Online Railway Reservation system SQL注入漏洞

2022-01-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
sourcecodester online railway
sql injection
web-based application
schedules
special characters
attacker

EPSS

0.002

Percentile

59.3%

SourceCodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation system is vulnerable to a SQL injection vulnerability in v1.0, which stems from a failure of the product’s sid parameter to properly filter input data for special characters. An attacker could execute malicious SQL statements through this vulnerability.

EPSS

0.002

Percentile

59.3%

Related for CNVD-2022-09314