Sql injection

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the reservation.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48689 Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'byname' parameter of the train.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48689

CVE-2023-48689 affects Railway Reservation System v1.0. The train.php resource exposes multiple unauthenticated SQL injection vulnerabilities via the byname parameter, which does not validate or filter characters before sending them to the database. The CVSS 3.1 vector indicates Network access, n...

CVE-2023-48689 Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'byname' parameter of the train.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48688

An unauthenticated SQL injection exists in Railway Reservation System v1.0 due to unvalidated input in the to parameter of reservation.php, allowing unfiltered data to reach the database. Remediation: validate/filter the to parameter or restrict access to reservation.php until a fix is provided. ...

CVE-2023-48687 Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the reservation.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-48687

Railway Reservation System v1.0 is reported to have multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the from parameter in the reservation.php resource, where input is not validated and is sent unfiltered to the database. This causes a vulnerable input path that could...

CVE-2023-48686

This CVE ID is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-48685

CVE-2023-48685 affects Railway Reservation System v1.0. The vulnerability is an unauthenticated SQL Injection in the login.php resource, triggered by the unvalidated psd parameter sent to the database. The issue is confirmed across multiple sources (NVD/NVD-Centric records and third-party advisor...

PT-2023-30895 · Unknown · Railway Reservation System

Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the user parameter of the "login.php" resource does not validate the characters received and they are sent...

Number withdrawn

Projectworlds Railway Reservation System is a railroad reservation system by Projectworlds India. This CVE number has been withdrawn...

PT-2023-30898 · Unknown · Railway Reservation System

Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The byname parameter of the "train.php" resource does not validate the characters received, and they are sent...

Projectworlds Railway Reservation System SQL Injection Vulnerability

Projectworlds Railway Reservation System is a railroad reservation system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Railway Reservation System v1.0, which stems from the "byname" parameter of train.php that does not validate received characters and is sent to...

Number withdrawn

Projectworlds Railway Reservation System is a railroad reservation system by Projectworlds India. This CVE number has been withdrawn...

Projectworlds Railway Reservation System SQL Injection Vulnerability

Projectworlds Railway Reservation System is a railroad reservation system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Railway Reservation System v1.0, which stems from the "from" parameter of reservation.php not validating received characters and sending them t...

Number withdrawn

Projectworlds Railway Reservation System is a railroad reservation system by Projectworlds India. This CVE number has been withdrawn...

Projectworlds Railway Reservation System SQL Injection Vulnerability

Projectworlds Railway Reservation System is a railroad reservation system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Railway Reservation System v1.0, which stems from the "psd" parameter of login.php that does not validate incoming characters and sends them to...

PT-2023-30896 · Unknown · Railway Reservation System

Name of the Vulnerable Software and Affected Versions: Railway Reservation System version 1.0 Description: The issue concerns multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the "reservation.php" resource does not validate the characters received, and they are sent...

CVE-2023-43458

Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...

CVE-2023-43458

Cross Site Scripting XSS vulnerability in Resort Reservation System v.1.0 allows a remote attacker to execute arbitrary code and obtain sensitive information via the room, name, and description parameters in the manageroom function...