PT-2023-30895 · Unknown · Railway Reservation System

CVE-2023-48686

·

Publicado

2023-12-21

·

Atualizado

2024-01-02

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
Name of the Vulnerable Software and Affected Versions Railway Reservation System version 1.0
Description The issue concerns an Unauthenticated SQL Injection vulnerability. Specifically, the user parameter of the "login.php" resource does not validate the characters received and they are sent unfiltered to the database.
Recommendations For Railway Reservation System version 1.0, consider validating and filtering the input for the user parameter in the "login.php" resource to prevent SQL injection attacks. As a temporary workaround, restrict access to the "login.php" resource until a proper fix is implemented.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2023-48686

Produtos afetados

Railway Reservation System