Online Railway Reservation System vulnerabilities

10 known vulnerabilities in Online Railway Reservation System from Online Railway Reservation System Project. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

10vulnerabilities

0critical

10high

0exploited

7.2average CVSS score

Latest first

7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33061Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_service.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33060Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_schedule.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33059Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_train.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33058Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_message.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33057Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /classes/Master.php?f=delete_reservation.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33042Jun 29, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/inquiries/view_details.php.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33056Jun 21, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/schedules/manage_schedule.php.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33055Jun 21, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/trains/manage_train.php.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33049Jun 21, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/?page=user/manage_user.
7.2 High severity
Online Railway Reservation System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-33048Jun 21, 2022Online Railway Reservation System Project
Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /orrs/admin/reservations/view_details.php.