CVE-2023-31934

CVE-2023-31934 is a Cross-Site Scripting vulnerability affecting Rail Pass Management System v1.0, enabling a remote attacker to exfiltrate sensitive data via the adminname parameter in admin-profile.php. The Red Hat, NVD, CVE list, PRION, CNNVD, and PT-Security entries consistently describe an X...

CVE-2023-31935

CVE-2023-31935 affects Rail Pass Management System v1.0. A Cross Site Scripting vulnerability exists in the emial parameter of admin-profile.php, enabling a remote attacker to obtain sensitive information. The Red Hat, NVD, CVE lists, and related sources in the connected documents confirm the bas...

CVE-2023-31932

CVE-2023-31932 affects Rail Pass Management System v1.0. Affected component: view-enquiry.php; vulnerability: SQL injection via the viewid parameter. Impact per sources: remote attacker can execute arbitrary code; CVSSv3.1 base score 7.2 (HIGH) with NETWORK attack vector, LOW complexity, requirin...

CVE-2023-31936

CVE-2023-31936 is a SQL injection in Rail Pass Management System v1.0. The vulnerability occurs in the viewid parameter of the file view-pass-detail.php, enabling a remote attacker to execute arbitrary code. According to the connected documents, the issue has a CVSS v3.1 base score of 7.2 (HIGH) ...

CVE-2025-4039

The CVE-2025-4039 entry affects PHPGurukul Rail Pass Management System 1.0, where the /admin/search-pass.php file’s searchdata parameter is vulnerable to SQL injection. External researchers report remote exploitation possibilities and publicly disclosed exploits. The exact affected functionality ...

CVE-2025-5554

CVE-2025-5554 affects PHPGurukul Rail Pass Management System 1.0. The vulnerability is a SQL injection in the file /admin/pass-bwdates-reports-details.php , caused by improper handling of the fromdate/todate parameters. Multiple connected documents (NVD, Red Hat, CNVD/CNNVD) describe remote explo...

CVE-2025-5553

Summary of the CVE-2025-5553 case (PHPGurukul Rail Pass Management System 1.0) A SQL injection vulnerability exists in an unknown functionality of the file /download-pass.php, caused by manipulation of the searchdata parameter. The issue is exploitable remotely and, according to multiple sources,...

CVE-2025-4070

The CVE-2025-4070 entry concerns PHPGurukul Rail Pass Management System 1.0. A SQL injection vulnerability exists in the /admin/changeimage.php endpoint, triggered by the editid parameter. The root cause is lack of input validation on editid, enabling arbitrary SQL execution. Exploitation is desc...

CVE-2025-5976

CVE-2025-5976 affects PHPGurukul Rail Pass Management System 1.0. The vulnerability resides in /admin/add-pass.php where manipulation of the fullname parameter triggers cross-site scripting. Exploitation can be performed remotely, and disclosures exist in multiple sources. Some connected document...

CVE-2023-31933

Rail Pass Management System v1.0 is affected by a SQL injection in the edit-pass-detail.php file (editid parameter). The issue enables a remote attacker to potentially execute arbitrary code, as described across NVD, Red Hat, CNNVD and other feeds. No explicit fix is documented in the provided co...

CVE-2023-3275

CVE-2023-3275 affects PHPGurukul Rail Pass Management System 1.0. The vulnerability resides in the POST Request Handler for the /view-pass-detail.php endpoint, where the searchdata parameter manipulation leads to SQL injection. It can be exploited remotely. Multiple connected documents confirm th...

CVE-2025-5975

PHPGurukul Rail Pass Management System 1.0 contains a cross-site scripting vulnerability in the /rpms/download-pass.php file. The issue arises from improper handling of the searchdata parameter, allowing remote attacker input to be executed in a user context. Public disclosures exist; multiple so...

CVE-2025-6125

CVE-2025-6125 affects PHPGurukul Rail Pass Management System 1.0. Affected is an unknown function in /admin/aboutus.php where manipulating the pagedes parameter leads to cross-site scripting. Exploitation can be remote, and the exploit has been disclosed publicly. Several connected sources corrob...

CVE-2023-31937

CVE-2023-31937 affects Rail Pass Management System v1.0. A SQL injection flaw in the editid parameter of edit-cateogry-detail.php can allow a remote attacker to execute arbitrary code. Primary details from multiple sources confirm the vulnerable component and input vector, with Red Hat/NVD entrie...

CVE-2025-6126

CVE-2025-6126 — PHPGurukul Rail Pass Management System 1.0 has a cross-site scripting vulnerability in the unknown-functionality of the file /contact.php. The vulnerability is triggered by manipulating the Name parameter, enabling remote attackers to inject scripts. Public exploits exist; multipl...