Lucene search
K

6 matches found

CNVD
CNVD
added 2025/06/11 12:0 a.m.1 views

Rail Pass Management System /download-pass.php File SQL Injection Vulnerability

Rail Pass Management System is a rail pass management system. The Rail Pass Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter searchdata in the file /download-pass.php. An attacker can...

9.8CVSS8.3AI score0.00291EPSS
Exploits1References1
Cvelist
Cvelist
added 2025/06/10 7:31 p.m.10 views

CVE-2025-5975 PHPGurukul Rail Pass Management System download-pass.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /rpms/download-pass.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotel...

5.3CVSS0.00204EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2025/06/10 12:0 a.m.2 views

PT-2025-24929 · Unknown · Phpgurukul Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Rail Pass Management System version 1.0 Description: A problematic issue was found in the PHPGurukul Rail Pass Management System, affecting an unknown part of the file /rpms/download-pass.php. The manipulation of the searchdata...

6.1CVSS4.3AI score0.00204EPSS
Exploits1References8
CVE
CVE
added 2025/06/04 2:0 a.m.48 views

CVE-2025-5553

Summary of the CVE-2025-5553 case (PHPGurukul Rail Pass Management System 1.0) A SQL injection vulnerability exists in an unknown functionality of the file /download-pass.php, caused by manipulation of the searchdata parameter. The issue is exploitable remotely and, according to multiple sources,...

9.8CVSS7.5AI score0.00291EPSS
Exploits1References6Affected Software1
Prion
Prion
added 2022/09/30 7:15 p.m.10 views

Sql injection

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

7.5CVSS9.8AI score0.00294EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/30 6:10 p.m.23 views

CVE-2022-35156

Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php...

9.8AI score0.00294EPSS
Exploits1References4
Rows per page
Query Builder