2195 matches found
Cross site scripting
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...
Cross site scripting
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...
PT-2023-23531 · Unknown · Rail Pass Management System
Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A sql injection issue allows a remote attacker to execute arbitrary code via the editid parameter of the "edit-pass-detail.php" file. This enables the attacker to potentially manipulate...
CVE-2023-31935
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...
CVE-2023-31934
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...
CVE-2023-31933
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file...
CVE-2023-31932
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...
CVE-2023-31933
Rail Pass Management System v1.0 is affected by a SQL injection in the edit-pass-detail.php file (editid parameter). The issue enables a remote attacker to potentially execute arbitrary code, as described across NVD, Red Hat, CNNVD and other feeds. No explicit fix is documented in the provided co...
PT-2023-23534 · Unknown · Rail Pass Management System
Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A sql injection issue allows a remote attacker to execute arbitrary code via the viewid parameter of the "view-pass-detail.php" file. This enables the attacker to potentially access or modi...
Rail Pass Management System SQL注入漏洞
Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...
CVE-2023-31936
CVE-2023-31936 is a SQL injection in Rail Pass Management System v1.0. The vulnerability occurs in the viewid parameter of the file view-pass-detail.php, enabling a remote attacker to execute arbitrary code. According to the connected documents, the issue has a CVSS v3.1 base score of 7.2 (HIGH) ...
CVE-2023-31934: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...
CVE-2023-31935: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...
CVE-2023-31935
CVE-2023-31935 affects Rail Pass Management System v1.0. A Cross Site Scripting vulnerability exists in the emial parameter of admin-profile.php, enabling a remote attacker to obtain sensitive information. The Red Hat, NVD, CVE lists, and related sources in the connected documents confirm the bas...
PT-2023-23535 · Unknown · Rail Pass Management System
Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A sql injection issue allows a remote attacker to execute arbitrary code via the editid parameter of the "edit-cateogry-detail.php" file. Recommendations: For Rail Pass Management System...
CVE-2023-31936: Improper Neutralization of Special Elements used in an SQL Command
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...
CVE-2023-31936
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...
CVE-2023-31933: Improper Neutralization of Special Elements used in an SQL Command
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file...
CVE-2023-31936
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...
Rail Pass Management System SQL注入漏洞
Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...