Online Railway Reservation System Project vulnerabilities

We track 10 vulnerabilities in Online Railway Reservation System Project products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on June 29, 2022.

10vulnerabilities

0critical

10high

0exploited

7.2average CVSS score

Latest Online Railway Reservation System Project vulnerabilities

7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33061Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_service.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33060Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33059Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_train.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33058Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_message.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33057Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33042Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/view_details.php.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33056Jun 21, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manage_schedule.php.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33055Jun 21, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/manage_train.php.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33049Jun 21, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manage_user.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33048Jun 21, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/view_details.php.