CVE-2022-33042

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

CVE-2022-33042

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

Sql injection

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

CVE-2022-33059

CVE-2022-33059 affects Online Railway Reservation System v1.0. A SQL injection vulnerability exists via the id parameter in /classes/Master.php?f=delete_train, enabling potentially unauthorized database access. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, CVE listings). No e...

CVE-2022-33059

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletetrain...

CVE-2022-33058

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletemessage...

CVE-2022-33058

CVE-2022-33058 affects Online Railway Reservation System v1.0. The vulnerability is a SQL injection via the id parameter in /classes/Master.php?f=delete_message, caused by unsafe SQL handling in that path. Initial data provides CVSS metrics (2.0: 6.5; 3.1: 7.2) indicating exploitable network acce...

CVE-2022-33057

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

CVE-2022-33057

CVE-2022-33057 affects SourceCodester Online Railway Reservation System v1.0, where a SQL injection vulnerability exists in the id parameter of /classes/Master.php?f=delete_reservation. The vulnerability arises from improper handling of user-supplied input, enabling potential manipulation of the ...

CVE-2022-33042

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

CVE-2022-33042

The connected records provide concrete details for CVE-2022-33042: Online Railway Reservation System v1.0 contains a SQL injection vulnerability in the admin/inquiries/view_details.php endpoint, triggered by the id parameter. The root cause is unsafe handling of user-supplied input in this parame...

PT-2022-21663

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/admin/inquiries/view details.php" API endpoint. Recommendations...

CVE-2022-33061: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteservice...

CVE-2022-33042: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php...

CVE-2022-33060: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteschedule...

Online Railway Reservation System SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...

PT-2022-21672

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter at the "/classes/Master.php?f=delete train" endpoint. Recommendations For Online Railway...

CVE-2022-33057: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletereservation...

PT-2022-21671

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. It can be exploited via the id parameter at the "/classes/Master.php?f=delete message" endpoint. Recommendations For Online Railwa...

PT-2022-21673

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/classes/Master.php?f=delete schedule" endpoint. Recommendations...