CVE-2024-9298

CVE-2024-9298 affects SourceCodester Online Railway Reservation System 1.0, specifically the Ticket Handler’s /?page=tickets functionality. The vulnerability arises from improper access controls when manipulating the id argument, enabling a remote attacker to access parts of the system. The issue...

CVE-2024-9297

The CVE-2024-9297 entry concerns SourceCodester Online Railway Reservation System 1.0. An improper authorization vulnerability exists in the admin area, where manipulating the page parameter with trains/schedules/system_info on the /admin/ path can be exploited remotely. The impact is described a...

CVE-2024-9300

SourceCodester Online Railway Reservation System 1.0 has a cross-site scripting vulnerability in the Message Us Form (contact_us.php). Malicious input in fullname, email, or message can be injected to affect users remotely, and the exploit has been disclosed publicly. The issue is documented acro...

CVE-2024-9299

The CVE-2024-9299 entry concerns SourceCodester Online Railway Reservation System version 1.0. The vulnerability is a cross-site scripting (XSS) flaw arising from manipulation of the First Name/Middle Name/Last Name parameters on the /?page=reserve endpoint. A remote attacker can exploit this, wi...

CVE-2024-9321

CVE-2024-9321 affects SourceCodester Online Railway Reservation System 1.0. The vulnerability is in the /admin/inquiries/view_details.php page where manipulating the id parameter leads to improper access controls, with remote exploitation possible. According to the supplied sources, the issue has...