CVE-2023-48685
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Dec 21, 2023
Updated: Dec 29, 2023
CWE ID 89
Summary
CVE-2023-48685: Unauthenticated SQL Injection vulnerabilities exist in Railway Reservation System v1.0. The 'psd' parameter in the login.php resource fails to validate user input, allowing attackers to inject malicious SQL queries directly into the database. This issue could lead to unauthorized access or data manipulation. It is advised that users upgrade to the latest version of the software to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share