CVE-2023-31937: SQL Injection
Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-31937?
CVE-2023-31937 has been classified as a high-severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2023-31937?
To fix CVE-2023-31937, implement input validation and parameterized queries to mitigate SQL injection risks.
What systems are vulnerable to CVE-2023-31937?
CVE-2023-31937 affects Rail Pass Management System version 1.0 from both the Rail Pass Management System Project and PHPGurukul.
Can CVE-2023-31937 lead to data leakage?
Yes, CVE-2023-31937 can allow an attacker to access and manipulate database entries, resulting in potential data leakage.
What is the exploit vector for CVE-2023-31937?
The exploit vector for CVE-2023-31937 is the 'editid' parameter in the edit-category-detail.php file, which is vulnerable to SQL injection.