CVE-2022-33061: SQL Injection
Published Jun 29, 2022
·Updated
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=deleteservice.
Affected Software
1 affected component
Online Railway Reservation System Project Online Railway Reservation System=1.0
Event History
Jun 29, 2022
CVE Published
via MITRE·05:18 PM
Data Sourced
via MITRE·05:18 PM
Description
Frequently Asked Questions
1
What is CVE-2022-33061?
CVE-2022-33061 is a SQL injection vulnerability discovered in Online Railway Reservation System v1.0.
2
How does CVE-2022-33061 impact the system?
CVE-2022-33061 allows an attacker to perform SQL injection attacks by manipulating the 'id' parameter in the /classes/Master.php?f=delete_service endpoint.
3
What is the severity level of CVE-2022-33061?
CVE-2022-33061 has a severity level of 7.2, which is considered high.
4
What is the affected software?
The affected software is Online Railway Reservation System v1.0.
5
Is there a fix available for CVE-2022-33061?
At this time, there is no known fix available for CVE-2022-33061. It is recommended to update to a patched version of the software, if available, or implement other mitigations.