high7.2
CVE-2022-33049
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manage_user.
Impact
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manage_user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Online Railway Reservation System Project | Online Railway Reservation System | Version 1.0 |