Railway Reservation System v1.0 is... CVE-2023-48689

- AV AC AU C I A
发布： 2023-12-21
修订： 2023-12-29

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'byname' parameter of the train.php resource does not validate the characters received and they are sent unfiltered to the database.

0%

漏洞利用/PoC

暂无可用Exp或PoC

受影响的平台与产品

当前有1条受影响产品信息