NetSight
high7.2

CVE-2022-33057

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.

Impact

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.

Affected products

VendorProductAffected versions
Online Railway Reservation System ProjectOnline Railway Reservation System
Version 1.0

Weakness classification

References