A vulnerability was found in SourceCodester Online Railway Reservation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/. The manipulation of the argument page with the input trains/schedules/system_info leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
| Link | Tags |
|---|---|
| https://vuldb.com/?id.278791 | vdb entry third party advisory technical description |
| https://vuldb.com/?ctiid.278791 | third party advisory permissions required signature |
| https://vuldb.com/?submit.412500 | third party advisory |
| https://github.com/gurudattch/CVEs/blob/main/Sourcecodester-Online-Railway-Reservation-PrivEsc.md | third party advisory exploit |
| https://www.sourcecodester.com/ | product |