CVE-2023-48688

creationtimestamp| type| source ---|---|--- 2023-12-21 22:27:22+00:00| seen| https://t.me/ctinow/158001 2023-12-29 17:17:10+00:00| seen| https://t.me/ctinow/160606...

CVE-2023-48688

An unauthenticated SQL injection exists in Railway Reservation System v1.0 due to unvalidated input in the to parameter of reservation.php, allowing unfiltered data to reach the database. Remediation: validate/filter the to parameter or restrict access to reservation.php until a fix is provided. ...