CVE-2023-31933

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file...

CVE-2023-31934

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...

CVE-2023-31935

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...

CVE-2023-31936

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...

PT-2023-23534 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A sql injection issue allows a remote attacker to execute arbitrary code via the viewid parameter of the "view-pass-detail.php" file. This enables the attacker to potentially access or modi...

PT-2023-23531 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A sql injection issue allows a remote attacker to execute arbitrary code via the editid parameter of the "edit-pass-detail.php" file. This enables the attacker to potentially manipulate...

PT-2023-23535 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A sql injection issue allows a remote attacker to execute arbitrary code via the editid parameter of the "edit-cateogry-detail.php" file. Recommendations: For Rail Pass Management System...

PT-2023-23532 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via the adminname parameter of "admin-profile.php". Recommendations: For Rail Pass Management System...

PT-2023-23530 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A sql injection issue allows a remote attacker to execute arbitrary code via the viewid parameter of the "view-enquiry.php" file. Recommendations: For Rail Pass Management System version 1....

CVE-2023-31932

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...

CVE-2023-31935

CVE-2023-31935 affects Rail Pass Management System v1.0. A Cross Site Scripting vulnerability exists in the emial parameter of admin-profile.php, enabling a remote attacker to obtain sensitive information. The Red Hat, NVD, CVE lists, and related sources in the connected documents confirm the bas...

CVE-2023-31937

CVE-2023-31937 affects Rail Pass Management System v1.0. A SQL injection flaw in the editid parameter of edit-cateogry-detail.php can allow a remote attacker to execute arbitrary code. Primary details from multiple sources confirm the vulnerable component and input vector, with Red Hat/NVD entrie...

CVE-2023-31932

CVE-2023-31932 affects Rail Pass Management System v1.0. Affected component: view-enquiry.php; vulnerability: SQL injection via the viewid parameter. Impact per sources: remote attacker can execute arbitrary code; CVSSv3.1 base score 7.2 (HIGH) with NETWORK attack vector, LOW complexity, requirin...

CVE-2023-31936

CVE-2023-31936 is a SQL injection in Rail Pass Management System v1.0. The vulnerability occurs in the viewid parameter of the file view-pass-detail.php, enabling a remote attacker to execute arbitrary code. According to the connected documents, the issue has a CVSS v3.1 base score of 7.2 (HIGH) ...

CVE-2023-31934

CVE-2023-31934 is a Cross-Site Scripting vulnerability affecting Rail Pass Management System v1.0, enabling a remote attacker to exfiltrate sensitive data via the adminname parameter in admin-profile.php. The Red Hat, NVD, CVE list, PRION, CNNVD, and PT-Security entries consistently describe an X...

PT-2023-23533 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via the emial parameter of "admin-profile.php". Recommendations: For Rail Pass Management System versio...

CVE-2023-31936: Improper Neutralization of Special Elements used in an SQL Command

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...

CVE-2023-31937: Improper Neutralization of Special Elements used in an SQL Command

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file...

CVE-2023-31933: Improper Neutralization of Special Elements used in an SQL Command

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file...

CVE-2023-31935: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...