Cross site scripting

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...

CVE-2023-31934

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...

CVE-2023-31936

CVE-2023-31936 is a SQL injection in Rail Pass Management System v1.0. The vulnerability occurs in the viewid parameter of the file view-pass-detail.php, enabling a remote attacker to execute arbitrary code. According to the connected documents, the issue has a CVSS v3.1 base score of 7.2 (HIGH) ...

CVE-2023-31936

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...

Rail Pass Management System SQL Injection Vulnerability

Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file...

Rail Pass Management System SQL Injection Vulnerability

Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...

Rail Pass Management System Cross-site Scripting Vulnerability

Rail Pass Management System is a pass management system. A cross-site scripting vulnerability exists in Rail Pass Management System version v.1.0 that could allow a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...

Rail Pass Management System SQL Injection Vulnerability

Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file...

Rail Pass Management System Cross-site Scripting Vulnerability

Rail Pass Management System is a pass management system. A cross-site scripting vulnerability exists in Rail Pass Management System version v.1.0 that could allow a remote attacker to obtain sensitive information via the emial parameter in admin-profile.php...

Rail Pass Management System SQL Injection Vulnerability

Rail Pass Management System is a pass management system. A security vulnerability exists in the Rail Pass Management System version v.1.0 that could allow a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...

CVE-2023-31933

Rail Pass Management System v1.0 is affected by a SQL injection in the edit-pass-detail.php file (editid parameter). The issue enables a remote attacker to potentially execute arbitrary code, as described across NVD, Red Hat, CNNVD and other feeds. No explicit fix is documented in the provided co...

PT-2023-23530 · Unknown · Rail Pass Management System

Name of the Vulnerable Software and Affected Versions: Rail Pass Management System version 1.0 Description: A sql injection issue allows a remote attacker to execute arbitrary code via the viewid parameter of the "view-enquiry.php" file. Recommendations: For Rail Pass Management System version 1....

CVE-2023-31935

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...

CVE-2023-31932

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...

CVE-2023-31933

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file...

CVE-2023-31936

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file...

CVE-2023-31937

CVE-2023-31937 affects Rail Pass Management System v1.0. A SQL injection flaw in the editid parameter of edit-cateogry-detail.php can allow a remote attacker to execute arbitrary code. Primary details from multiple sources confirm the vulnerable component and input vector, with Red Hat/NVD entrie...

CVE-2023-31935: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the emial parameter of admin-profile.php...

CVE-2023-31932: Improper Neutralization of Special Elements used in an SQL Command

Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file...

CVE-2023-31934: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to obtain sensitive information via the adminname parameter of admin-profile.php...