CVE-2024-9298 SourceCodester Online Railway Reservation System Ticket ?page=tickets access control

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /?page=tickets of the component Ticket Handler. The manipulation of the argument id leads to improper access...

CVE-2024-9298

CVE-2024-9298 affects SourceCodester Online Railway Reservation System 1.0, specifically the Ticket Handler’s /?page=tickets functionality. The vulnerability arises from improper access controls when manipulating the id argument, enabling a remote attacker to access parts of the system. The issue...

CVE-2024-9297

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument page with the input trains/schedules/systeminfo leads to improper...

CVE-2024-9297 SourceCodester Online Railway Reservation System admin improper authorization

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument page with the input trains/schedules/systeminfo leads to improper...

CVE-2024-9297

The CVE-2024-9297 entry concerns SourceCodester Online Railway Reservation System 1.0. An improper authorization vulnerability exists in the admin area, where manipulating the page parameter with trains/schedules/system_info on the /admin/ path can be exploited remotely. The impact is described a...

CVE-2024-9297 SourceCodester Online Railway Reservation System admin improper authorization

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument page with the input trains/schedules/systeminfo leads to improper...

PT-2024-39555 · Sourcecodester · Sourcecodester Online Railway Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Railway Reservation System version 1.0 Description: A problematic issue was found in the Message Us Form component, specifically in the contact us.php file. The manipulation of the fullname, email, or message arguments...

Online Railway Reservation System 授权问题漏洞

Online Railway Reservation System is an online railroad reservation system by adminastro individual developers. An authorization issue vulnerability exists in SourceCodester Online Railway Reservation System version 1.0, which stems from the page with the input trains/schedules/systeminfo paramet...

PT-2024-39552 · Sourcecodester · Sourcecodester Online Railway Reservation System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Railway Reservation System version 1.0 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/. The manipulation of the page argument with the input...

CVE-2024-7835

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS. This issue affects Ferry Reservation System: before 240805-002...

CVE-2024-7835

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS. This issue affects Ferry Reservation System: before 240805-002...

CVE-2024-7735

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection. This issue affects Ferry Reservation System: before 240805-002...

CVE-2024-7735

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection. This issue affects Ferry Reservation System: before 240805-002...

CVE-2024-7835 Reflected XSS in Exnet Informatics Software's Ferry Reservation System

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Exnet Informatics Software Ferry Reservation System allows Reflected XSS. This issue affects Ferry Reservation System: before 240805-002...

CVE-2024-7835

CVE-2024-7835 describes a Reflected XSS in Exnet Informatics Software Ferry Reservation System. The issue stems from improper neutralization of input during web page generation, allowing attacker-controlled input to be reflected in the page. Affected versions are the Ferry Reservation System prio...

CVE-2024-7735

The CVE-2024-7735 entry relates to an SQL Injection in Exnet Informatics Software Ferry Reservation System (prior to version 240805-002). The root cause is improper neutralization of special elements in SQL commands within the Ferry Reservation System, enabling potential data manipulation via SQL...

CVE-2024-7735 SQLi in Exnet Informatics Software's Ferry Reservation System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection. This issue affects Ferry Reservation System: before 240805-002...

CVE-2024-7735 SQLi in Exnet Informatics Software's Ferry Reservation System

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Exnet Informatics Software Ferry Reservation System allows SQL Injection. This issue affects Ferry Reservation System: before 240805-002...

Exnet Informatics Software Ferry Reservation System 跨站脚本漏洞

Exnet Informatics Software Ferry Reservation System is a ferry reservation system from Exnet Informatics Software. A cross-site scripting vulnerability exists in versions prior to Exnet Informatics Software Ferry Reservation System 240805-002, which stems from improper input neutralization during...

PT-2024-38543 · Exnet Informatics · Ferry Reservation System

Name of the Vulnerable Software and Affected Versions: Exnet Informatics Software Ferry Reservation System versions prior to 240805-002 Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQ...