CVE-2023-3275

Summary

CVE-2023-3275 is a critical vulnerability discovered in the PHPGurukul Rail Pass Management System 1.0. This issue affects an unidentified functionality within the file /view-pass-detail.php, specifically the POST Request Handler. An attacker can exploit this vulnerability through manipulation of the searchdata argument, leading to SQL injection. The exploit can be executed remotely, making this a significant security risk. The Vulnerability Database (VDB) has assigned the identifier VDB-231625 to this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.