CVE-2023-48687

Railway Reservation System v1.0 is reported to have multiple Unauthenticated SQL Injection vulnerabilities. The issue arises from the from parameter in the reservation.php resource, where input is not validated and is sent unfiltered to the database. This causes a vulnerable input path that could...