CVE-2022-33060: SQL Injection

Published Jun 29, 2022

Updated

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteschedule.

Affected Software

1 affected component

Online Railway Reservation System Project Online Railway Reservation System=1.0

Event History

Jun 29, 2022

CVE Published

via MITRE·05:18 PM

Data Sourced

via MITRE·05:18 PM

Description

Frequently Asked Questions

What is CVE-2022-33060?

CVE-2022-33060 is a SQL injection vulnerability in Online Railway Reservation System v1.0.

How does CVE-2022-33060 affect Online Railway Reservation System v1.0?

CVE-2022-33060 allows an attacker to perform SQL injection attacks through the id parameter in the delete_schedule function of the Master.php file.

What is the severity of CVE-2022-33060?

CVE-2022-33060 has a severity rating of 7.2 (high).

How can I fix CVE-2022-33060 in Online Railway Reservation System v1.0?

To fix CVE-2022-33060, it is recommended to implement proper input validation and parametrized queries to prevent SQL injection attacks.

Where can I find more information about CVE-2022-33060?

More information about CVE-2022-33060 can be found at the following reference: [https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-8.md](https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/online-railway-reservation-system/SQLi-8.md)