Rail Pass Management System vulnerabilities

9 known vulnerabilities in Rail Pass Management System from PHPGurukul. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Rail Pass Management System: Improper Neutralization of Special Elements in Output Used by a Downstream Component

  CVE-2025-5554Jun 4, 2025PHPGurukul

  A vulnerability, which was classified as critical, has been found in PHPGurukul Rail Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/pass-bwdates-reports-details.php. The manipulation of the argument fromdate

• 9.8 Critical severity

  Rail Pass Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-5553Jun 4, 2025PHPGurukul

  A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download-pass.php. The manipulation of the argument searchdata leads to sql injection. The a

• 9.8 Critical severity

  Rail Pass Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-4070Apr 29, 2025PHPGurukul

  A vulnerability, which was classified as critical, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to initi

• 9.8 Critical severity

  Rail Pass Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-4039Apr 28, 2025PHPGurukul

  A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/search-pass.php. The manipulation of the argument searchdata leads to sql injection.

• 7.2 High severity

  Rail Pass Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31937Jul 28, 2023PHPGurukulEPSS 1.13%

  Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-cateogry-detail.php file.

• 7.2 High severity

  Rail Pass Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31936Jul 28, 2023PHPGurukulEPSS 1.3%

  Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-pass-detail.php file.

• 7.2 High severity

  Rail Pass Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31933Jul 28, 2023PHPGurukulEPSS 1.3%

  Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the editid parameter of the edit-pass-detail.php file.

• 7.2 High severity

  Rail Pass Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-31932Jul 28, 2023PHPGurukulEPSS 1.3%

  Sql injection vulnerability found in Rail Pass Management System v.1.0 allows a remote attacker to execute arbitrary code via the viewid parameter of the view-enquiry.php file.

• 9.8 Critical severity

  Rail Pass Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-3275Jun 15, 2023PHPGurukul

  A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /view-pass-detail.php of the component POST Request Handler. The manipulation of the argument