CVE-2022-33042: SQL Injection
Published Jun 29, 2022
·Updated
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/viewdetails.php.
Affected Software
1 affected component
Online Railway Reservation System Project Online Railway Reservation System=1.0
Event History
Jun 29, 2022
CVE Published
via MITRE·04:52 PM
Data Sourced
via MITRE·04:52 PM
Description
Frequently Asked Questions
1
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2022-33042.
2
What is the severity level of CVE-2022-33042?
CVE-2022-33042 has a severity level of 7.2, which is considered high.
3
How does the SQL injection vulnerability occur in Online Railway Reservation System v1.0?
The SQL injection vulnerability occurs via the id parameter in the /admin/inquiries/view_details.php page of Online Railway Reservation System v1.0.
4
What is the affected software version?
The affected software version is Online Railway Reservation System v1.0.
5
Is there a fix available for this vulnerability?
Yes, it is recommended to update to a patched version or apply a security update provided by the vendor to fix this vulnerability.