Description
A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /?page=tickets of the component Ticket Handler. The manipulation of the argument id leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
ExploitThird Party Advisory
https://vuldb.com/?ctiid.278792
Permissions RequiredThird Party Advisory
Third Party Advisory
https://vuldb.com/?submit.412740
Third Party Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4.3 · Medium
CVSS V3.1
CVSS V3.0
CVSS V2.0
Information
Source identifier
Vulnerability status
Analyzed
Published
2024-09-28T14:15:02.020
1 week agoLast modified
2024-10-01T13:37:52.373
1 week ago