CVE-2023-48689

Summary

CVE-2023-48689: Unauthenticated SQL Injection vulnerabilities exist in Railway Reservation System v1.0. The 'byname' parameter in the train.php resource fails to validate user input, leading to unfiltered data being sent directly to the database, potentially enabling attackers to execute malicious SQL queries and gain unauthorized access to sensitive information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.