Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-9298

Опубликовано: 28 сент. 2024
Источник: nvd
CVSS3: 4.3
CVSS2: 4
EPSS Низкий

Описание

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /?page=tickets of the component Ticket Handler. The manipulation of the argument id leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:oretnom23:railway_reservation_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 19%
0.00061
Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-284
CWE-639

Связанные уязвимости

CVSS3: 4.3
github
больше 1 года назад

A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /?page=tickets of the component Ticket Handler. The manipulation of the argument id leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

EPSS

Процентиль: 19%
0.00061
Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-284
CWE-639