VendorsOnline Railway Reservation System Projectonline_railway_reservation_systemall versions
Vulnerabilities

Online Railway Reservation System Project Online Railway Reservation System

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2021-46308
An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter.
Published 2022-01-21 · Modified
10.0EPSS 0.016
CVE-2022-33042
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/view_details.php.
Published 2022-06-29 · Modified
7.2EPSS 0.010
CVE-2022-33048
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/view_details.php.
Published 2022-06-21 · Modified
7.2EPSS 0.010
CVE-2022-33049
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manage_user.
Published 2022-06-21 · Modified
7.2EPSS 0.010
CVE-2022-33055
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/manage_train.php.
Published 2022-06-21 · Modified
7.2EPSS 0.010
CVE-2022-33056
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manage_schedule.php.
Published 2022-06-21 · Modified
7.2EPSS 0.010
CVE-2022-33057
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.
Published 2022-06-29 · Modified
7.2EPSS 0.010
CVE-2022-33058
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_message.
Published 2022-06-29 · Modified
7.2EPSS 0.010
CVE-2022-33059
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_train.
Published 2022-06-29 · Modified
7.2EPSS 0.010
CVE-2022-33060
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule.
Published 2022-06-29 · Modified
7.2EPSS 0.010
CVE-2022-33061
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_service.
Published 2022-06-29 · Modified
7.2EPSS 0.008
CVE-2024-7910
CodeAstro Online Railway Reservation System Profile Photo Update emp-profile-avatar.php unrestricted upload
Published 2024-08-18 · Analyzed
7.2EPSS 0.006
CVE-2024-7912
CodeAstro Online Railway Reservation System assets exposure of information through directory listing
Published 2024-08-18 · Analyzed
6.9EPSS 0.008
CVE-2024-0782
CodeAstro Online Railway Reservation System pass-profile.php cross site scripting
Published 2024-01-22 · Modified
6.1EPSS 0.006
CVE-2024-7815
CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting
Published 2024-08-15 · Analyzed
5.11 PoCEPSS 0.012
CVE-2024-7814
CodeAstro Online Railway Reservation System Add Employee Page admin-add-employee.php cross site scripting
Published 2024-08-15 · Analyzed
5.1EPSS 0.004