Vulnerabilities

Filters

1 selected

16 records

Sort

Vendor: Online Railway Reservation System Project Clear all filters

TI-2024-07334 CVE-2024-7912 · GHSA-8r2h-58x4-rmxg

CodeAstro Online Railway Reservation System assets exposure of information through directory listing

HIGH 70

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00796 Published 2024-08-18 No fix listed CWE-548

TI-2024-07332 CVE-2024-7910 · GHSA-pwc6-45qr-9764

CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload

MEDIUM 56

A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00638 Published 2024-08-18 No fix listed CWE-434

TI-2024-07242 CVE-2024-7815 · GHSA-q2wf-pr3p-9rhr

CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting

MEDIUM 56

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.01195 Published 2024-08-15 No fix listed CWE-79

TI-2024-07241 CVE-2024-7814 · GHSA-cjw7-m3pc-wg7r

CodeAstro Online Railway Reservation System Add Employee Page admin-add-employee.php cross site scripting

MEDIUM 56

A vulnerability, which was classified as problematic, was found in CodeAstro Online Railway Reservation System 1.0.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00419 Published 2024-08-15 No fix listed CWE-79

TI-2024-00720 CVE-2024-0782 · GHSA-frp5-rv68-3m3c

CodeAstro Online Railway Reservation System pass-profile.php cross site scripting

MEDIUM 60

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00571 Published 2024-01-22 No fix listed CWE-79

TI-2022-14543 CVE-2022-33061 · GHSA-5qhr-wxg8-2347

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_service.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00798 Published 2022-06-29 No fix listed CWE-89

TI-2022-14542 CVE-2022-33060 · GHSA-rq6p-6w22-rpjc

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00956 Published 2022-06-29 No fix listed CWE-89

TI-2022-14541 CVE-2022-33059 · GHSA-9g48-j535-x6f7

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_train.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00956 Published 2022-06-29 No fix listed CWE-89

TI-2022-14540 CVE-2022-33058 · GHSA-59xg-vgg8-c39x

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_message.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00956 Published 2022-06-29 No fix listed CWE-89

TI-2022-14539 CVE-2022-33057 · GHSA-99c3-m3cj-vh2x

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00956 Published 2022-06-29 No fix listed CWE-89

TI-2022-14532 CVE-2022-33042 · GHSA-5mvh-cpg9-4rwh

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/view_details.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00956 Published 2022-06-29 No fix listed CWE-89

TI-2022-14538 CVE-2022-33056 · GHSA-j566-6xc6-hgfc

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manage_schedule.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00956 Published 2022-06-21 No fix listed CWE-89

TI-2022-14537 CVE-2022-33055 · GHSA-r299-2j2m-9j73

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/manage_train.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00956 Published 2022-06-21 No fix listed CWE-89

TI-2022-14536 CVE-2022-33049 · GHSA-vqhv-95pj-c4rc

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manage_user.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00956 Published 2022-06-21 No fix listed CWE-89

TI-2022-14535 CVE-2022-33048 · GHSA-cwwx-v44g-53rc

Online Railway Reservation System v1.0 was discovered to contain a SQL injection…

LOW 33

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/view_details.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00956 Published 2022-06-21 No fix listed CWE-89

TI-2021-21147 CVE-2021-46308 · GHSA-f9qq-9hf8-mpcj

An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter.

MEDIUM 45

An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01556 Published 2022-01-21 No fix listed CWE-89