CVE-2024-9297

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument page with the input trains/schedules/system_info leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Score

CVSS 3.1 6.3 Medium

Status

Analyzed - cna@vuldb.com

Published

2024-09-28

Last modified

2024-09-30

Weaknesses

CWE-285, CWE-862

Affected products

• Railway Reservation System (Oretnom23)
• Online Railway Reservation System (Sourcecodester)

References

• https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Online-Railway-Reservation-PrivEsc.md
• https://vuldb.com/?ctiid.278791
• https://vuldb.com/?id.278791
• https://vuldb.com/?submit.412500
• https://www.sourcecodester.com/