Railway Reservation System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
CVE-2023-48685

9.8CRITICAL

Key Information:

Vendor: Projectworlds Pvt. Limited
Status: Railway Reservation System
Vendor: CVE Published:; 21 December 2023

🔔 Create Projectworlds Pvt. Limited Vulnerability Alert

What is CVE-2023-48685?

The Railway Reservation System v1.0 has a serious security flaw that allows attackers to exploit multiple Unauthenticated SQL Injection vulnerabilities. Specifically, the 'psd' parameter in the login.php resource fails to properly validate input, enabling malicious users to send unfiltered data directly to the database. This can lead to unauthorized access, data manipulation, and potential compromise of sensitive information.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Railway Reservation System 1.0

References

https://fluidattacks.com/advisories/barenboim/

third-party-advisory

https://projectworlds.in/

product

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Dec 21, 2023
Vulnerability Reserved
Nov 17, 2023

JSON

Projectworlds Pvt. Limited

What is CVE-2023-48685?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

Affected Version(s)

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.