CVE-2022-33049: SQL Injection

Published Jun 21, 2022

Updated

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manageuser.

Affected Software

1 affected component

Online Railway Reservation System Project Online Railway Reservation System=1.0

Event History

Jun 21, 2022

CVE Published

via MITRE·01:15 PM

Data Sourced

via MITRE·01:15 PM

Description

Frequently Asked Questions

What is CVE-2022-33049?

CVE-2022-33049 is a SQL injection vulnerability in the Online Railway Reservation System v1.0.

How does CVE-2022-33049 affect the Online Railway Reservation System?

CVE-2022-33049 affects the Online Railway Reservation System v1.0 by allowing an attacker to perform SQL injection via the id parameter.

What is the severity of CVE-2022-33049?

CVE-2022-33049 has a severity rating of 7.2 (High).

How can I fix the SQL injection vulnerability in Online Railway Reservation System v1.0?

To fix the SQL injection vulnerability in Online Railway Reservation System v1.0, you should sanitize user input and use parametrized queries or prepared statements when accessing the database.

Where can I find more information about CVE-2022-33049?

You can find more information about CVE-2022-33049 at the following reference link: [Reference](https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-2.md)