VULNERABILITY INTELLIGENCE

CVE-2023-48687

CVSS score9.8 CRITICAL

EPSS probability0.67%

CISA KEVNot currently listed

Published2023-12-21

Last modified2026-06-17

Description

Railway Reservation System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'from' parameter of the reservation.php resource does not validate the characters received and they are sent unfiltered to the database.