CVE-2022-33059: SQL Injection
Published Jun 29, 2022
·Updated
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deletetrain.
Affected Software
1 affected component
Online Railway Reservation System Project Online Railway Reservation System=1.0
Event History
Jun 29, 2022
CVE Published
via MITRE·05:05 PM
Data Sourced
via MITRE·05:05 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this SQL injection vulnerability?
The vulnerability ID for this SQL injection vulnerability is CVE-2022-33059.
2
What is the affected software for this vulnerability?
The affected software for this vulnerability is Online Railway Reservation System v1.0.
3
How severe is the SQL injection vulnerability in Online Railway Reservation System v1.0?
The severity of the SQL injection vulnerability in Online Railway Reservation System v1.0 is high with a CVSS score of 7.2.
4
How can the SQL injection vulnerability be exploited in Online Railway Reservation System v1.0?
The SQL injection vulnerability in Online Railway Reservation System v1.0 can be exploited via the 'id' parameter at /classes/Master.php?f=delete_train.
5
Is there a fix available for the SQL injection vulnerability in Online Railway Reservation System v1.0?
There is currently no information available about a fix for the SQL injection vulnerability in Online Railway Reservation System v1.0.