CVE-2023-3003: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manageprices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The...

PT-2023-22515 · Sourcecodester · Train Station Ticketing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Train Station Ticketing System version 1.0 Description: A critical issue was found in the file manage prices.php of the component GET Parameter Handler. The manipulation of the id argument leads to sql injection. The attack can...

Train Station Ticketing System SQL注入漏洞

Train Station Ticketing System is a Train Station Ticketing System by Carlo Montero Individual Developer. A SQL injection vulnerability exists in Train Station Ticketing System version 1.0, which is caused by incorrect manipulation of the parameter id...

petit-train-corte.com Cross Site Scripting vulnerability OBB-3224168

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The East Palestine, Ohio Train Derailment Created a Perfect TikTok Storm

The social media platform helped push the story into the mainstream while also fueling misinformation and conspiracy theories...

SUSE CVE-2009-4007

Unspecified vulnerability in the NormaliseTrainConsist function in src/traincmd.cpp in OpenTTD before 0.7.5-RC1 allows remote attackers to cause a denial of service daemon crash via certain game actions involving a wagon and a dual-headed engine...

CVE-2022-43079

A cross-site scripting XSS vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

CVE-2022-43079

A cross-site scripting XSS vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

Cross site scripting

A cross-site scripting XSS vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

Train Scheduler App 跨站脚本漏洞

Train Scheduler App is a train scheduling application by Carlo Montero Personal Developer. A security vulnerability exists in Train Scheduler App v1.0, which stems from a cross-site scripting XSS vulnerability contained in /admin/add-fee. An attacker can exploit this vulnerability to execute...

CVE-2022-43079

CVE-2022-43079 documents a cross-site scripting (XSS) vulnerability in Train Scheduler App v1.0. The flaw occurs in the /admin/add-fee.php endpoint, via a crafted payload injected into the cmddept parameter, enabling execution of arbitrary web scripts/HTML. CVSS v3.1 vector: AV:N/AC:L/PR:N/UI:R/S...

CVE-2022-43079

A cross-site scripting XSS vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

CVE-2022-43079

A cross-site scripting XSS vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

PT-2022-26742 · Unknown · Train Scheduler App

Name of the Vulnerable Software and Affected Versions: Train Scheduler App version 1.0 Description: A cross-site scripting XSS issue exists in the /admin/add-fee.php endpoint, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

CVE-2022-43079: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in /admin/add-fee.php of Train Scheduler App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the cmddept parameter...

CVE-2022-3774

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /trainschedulerapp/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may...

CVE-2022-3774

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /trainschedulerapp/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may...

Design/Logic Flaw

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /trainschedulerapp/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may...

CVE-2022-3774

CVE-2022-3774 affects SourceCodester Train Scheduler App 1.0. The vulnerability is an Insecure Direct Object Reference (IDOR) in the endpoint /train_scheduler_app/?action=delete, where the id parameter allows improper control of resource identifiers. Multiple sources (NVD, Red Hat, CVE listings, ...

Train Scheduler App 安全漏洞

Train Scheduler App is a train scheduling application by Carlo Montero Personal Developer. A security vulnerability exists in Train Scheduler App version 1.0, which stems from an unknown function in the file /trainschedulerapp/?action=delete is affected, where manipulation of the parameter id can...