CVE-2024-7815: CodeAstro Online Railway Reservation System Update Employee Page admin-update-employee.php cross site scripting

Published Aug 15, 2024

Updated

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-update-employee.php of the component Update Employee Page. The manipulation of the argument empfname /emplname /empnatidno/empaddr leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected Software

1 affected component

Online Railway Reservation System Project Online Railway Reservation System=1.0

Event History

Aug 15, 2024

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

DescriptionSeverityWeakness

Apr 10, 2025

Exploit Published

12:00 AM

Known Exploited

09:48 AM

Frequently Asked Questions

What is the severity of CVE-2024-7815?

CVE-2024-7815 is classified as a problematic vulnerability affecting the CodeAstro Online Railway Reservation System 1.0.

How do I fix CVE-2024-7815?

To mitigate CVE-2024-7815, it is recommended to review and patch the Update Employee Page functionality in the /admin/admin-update-employee.php file.

What systems are affected by CVE-2024-7815?

CVE-2024-7815 affects the CodeAstro Online Railway Reservation System version 1.0.

What kind of attack could CVE-2024-7815 enable?

CVE-2024-7815 could potentially allow unauthorized manipulation of employee data through the vulnerable update employee functionality.

Who should be aware of CVE-2024-7815?

Developers and system administrators using CodeAstro Online Railway Reservation System 1.0 should be aware of CVE-2024-7815 to ensure system security.