CVE-2022-33056: SQL Injection

Published Jun 21, 2022

Updated

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manageschedule.php.

Affected Software

1 affected component

Online Railway Reservation System Project Online Railway Reservation System=1.0

Event History

Jun 21, 2022

CVE Published

via MITRE·01:21 PM

Data Sourced

via MITRE·01:21 PM

Description

Frequently Asked Questions

What is the severity of CVE-2022-33056?

The severity of CVE-2022-33056 is high, with a severity value of 7.2.

How can I exploit the SQL injection vulnerability in Online Railway Reservation System v1.0?

As a cybersecurity analyst, I cannot provide guidance on exploiting vulnerabilities. It is recommended to contact the software vendor for assistance.

How do I fix the SQL injection vulnerability in Online Railway Reservation System v1.0?

To fix the SQL injection vulnerability in Online Railway Reservation System v1.0, apply the latest patch or update provided by the software vendor.

What is CWE-89?

CWE-89 is a Common Weakness Enumeration identifier for SQL injection vulnerabilities.

Where can I find more information about CVE-2022-33056?

You can find more information about CVE-2022-33056 at the following reference: [CVE-2022-33056 Reference](https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-4.md)