A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /?page=tickets of the component Ticket Handler. The manipulation of the argument id leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://vuldb.com/?id.278792 | Third Party Advisory |
| https://vuldb.com/?ctiid.278792 | Permissions Required Third Party Advisory |
| https://vuldb.com/?submit.412740 | Third Party Advisory |
| https://github.com/gurudattch/CVEs/blob/main/Sourcecoderster-Online-Railway-Reservation-System-IDOR.md | Exploit Third Party Advisory |
| https://www.sourcecodester.com/ | Product |
Configurations
History
01 Oct 2024, 13:37
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oretnom23 railway Reservation System
Oretnom23 |
|
| CWE | CWE-639 | |
| References | () https://vuldb.com/?ctiid.278792 - Permissions Required, Third Party Advisory | |
| References | () https://vuldb.com/?id.278792 - Third Party Advisory | |
| References | () https://github.com/gurudattch/CVEs/blob/main/Sourcecoderster-Online-Railway-Reservation-System-IDOR.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?submit.412740 - Third Party Advisory | |
| References | () https://www.sourcecodester.com/ - Product | |
| CPE | cpe:2.3:a:oretnom23:railway_reservation_system:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.3 |
28 Sep 2024, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-09-28 14:15
Updated : 2024-10-01 13:37
NVD link : CVE-2024-9298
Mitre link : CVE-2024-9298
JSON object : View
Products Affected
oretnom23
- railway_reservation_system
CWE
CWE-639
Authorization Bypass Through User-Controlled Key