CVE-2023-31934

CVE-2023-31934 is a Cross-Site Scripting vulnerability affecting Rail Pass Management System v1.0, enabling a remote attacker to exfiltrate sensitive data via the adminname parameter in admin-profile.php. The Red Hat, NVD, CVE list, PRION, CNNVD, and PT-Security entries consistently describe an X...

CVE-2023-31932

CVE-2023-31932 affects Rail Pass Management System v1.0. Affected component: view-enquiry.php; vulnerability: SQL injection via the viewid parameter. Impact per sources: remote attacker can execute arbitrary code; CVSSv3.1 base score 7.2 (HIGH) with NETWORK attack vector, LOW complexity, requirin...

CVE-2023-31936

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...

Rail Pass Management System SQL注入漏洞

Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...

Rail Pass Management System 跨站脚本漏洞

Rail Pass Management System is a pass management system. A cross-site scripting vulnerability exists in Rail Pass Management System version v.1.0 that could allow a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...

PT-2023-23533 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via the emial parameter of "admin-profile.php". Recommendations: For Rail Pass Management System versio...

PT-2023-23532 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via the adminname parameter of "admin-profile.php". Recommendations: For Rail Pass Management System...

Rail Pass Management System SQL注入漏洞

Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file...

Rail Pass Management System SQL注入漏洞

Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file...

CVE-2023-31937

CVE-2023-31937 affects Rail Pass Management System v1.0. A SQL injection flaw in the editid parameter of edit-cateogry-detail.php can allow a remote attacker to execute arbitrary code. Primary details from multiple sources confirm the vulnerable component and input vector, with Red Hat/NVD entrie...

CVE-2023-31937: Improper Neutralization of Special Elements used in an SQL Command

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file...

CVE-2023-31932: Improper Neutralization of Special Elements used in an SQL Command

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...

pass-location.com Cross Site Scripting vulnerability OBB-3552503

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-34132

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

CVE-2023-34132

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

Authentication flaw

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

CVE-2023-34132

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

CVE-2023-34132

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...

CVE-2023-34132

CVE-2023-34132 concerns SonicWall GMS and Analytics where authentication uses a password hash instead of the actual password, enabling Pass-the-Hash style attacks. Affected: GMS versions 9.3.2-SP1 and earlier; Analytics versions 2.5.0.4-R7 and earlier. The underlying issue is password-hash based ...

CVE-2023-34132: Use of Password Hash Instead of Password for Authentication

Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions...