CVE-2022-33049

CVE-2022-33049 affects Online Railway Reservation System v1.0, with a SQL injection vulnerability exploitable via the id parameter in /orrs/admin/?page=user/manage_user. Root cause: insufficient input validation allowing SQL injection. Impact details are not quantified beyond the generic SQLi ris...

CVE-2022-33048

CVE-2022-33048 corresponds to a SQL injection vulnerability in Online Railway Reservation System v1.0, exploitable via the id parameter in /orrs/admin/reservations/view_details.php. The issue is repeatedly described across multiple records (NVD, Red Hat advisory, CNVD, CVE list, CNVD/CNNVD mirror...

CVE-2022-33048

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/viewdetails.php...

PT-2022-21666

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/orrs/admin/reservations/view details.php" API endpoint...

CVE-2022-33056: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manageschedule.php...

PT-2022-21669

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/orrs/admin/schedules/manage schedule.php" API endpoint...

Online Railway Reservation system SQL注入漏洞

Sourcecodester Online Railway Reservation system is a web-based application that provides an online platform for rail or train station passengers or potential passengers to browse their schedules and reserve seats. sourceCodester Online Railway Reservation System v1.0 is vulnerable to a SQL...

CVE-2022-33055: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/managetrain.php...

PT-2022-21668

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/orrs/admin/trains/manage train.php" API endpoint. Recommendation...

PT-2022-21667

Name of the Vulnerable Software and Affected Versions Online Railway Reservation System version 1.0 Description The issue is related to a SQL injection vulnerability. This vulnerability can be exploited via the id parameter at the "/orrs/admin/?page=user/manage user" API endpoint. Recommendations...

CVE-2022-33049: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manageuser...

CVE-2022-33048: Improper Neutralization of Special Elements used in an SQL Command

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/viewdetails.php...

CVE-2021-41662

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...

CVE-2021-41662

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...

Sql injection

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...

CVE-2021-41662

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...

CVE-2021-41662

CVE-2021-41662 affects South Gate Inn Online Reservation System v1.0. The vulnerability is an SQL injection that can be chained with a malicious PHP file upload caused by improper file handling in the editImg function, enabling remote code execution. Documented CVSSv3.1 impact is Critical (9.8) w...

South Gate Inn Online Reservation System SQL注入漏洞

South Gate Inn Online Reservation System is a hotel online reservation system by Janobe Individual Developer. A security vulnerability exists in South Gate Inn Online Reservation System v1.0, which stems from improper file handling in the editImg function and can be exploited by an attacker to...

CVE-2021-41662: Improper Neutralization of Special Elements used in an SQL Command

The South Gate Inn Online Reservation System v1.0 contains an SQL injection vulnerability that can be chained with a malicious PHP file upload, which is caused by improper file handling in the editImg function. This vulnerability leads to remote code execution...

PT-2022-11459

Name of the Vulnerable Software and Affected Versions The South Gate Inn Online Reservation System version 1.0 Description The issue is caused by improper file handling in the editImg function, leading to an SQL injection vulnerability that can be chained with a malicious PHP file upload. This...