Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2023-48689

Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'byname' parameter of the train.php resource does not validate the characters received and they are sent unfiltered to the database.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Projectworlds
Products
Railway Reservation System
CVE-2023-48687

Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the reservation.php resource does not validate the characters received and they are sent unfiltered to the database.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Projectworlds
Products
Railway Reservation System
CVE-2023-48685

Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'psd' parameter of the login.php resource does not validate the characters received and they are sent unfiltered to the database.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Projectworlds
Products
Railway Reservation System