CVE-2023-3003
MediumCVSS 6.3Exploitation Probability (EPSS)
Elevated risk53th percentile - higher than 53% of all known CVEs
Summary
A critical vulnerability was found in SourceCodester Train Station Ticketing System version 1.0. Manipulation of the 'id' argument in the manage_prices.php file leads to SQL injection, which can be exploited remotely.
Risk Assessment
This vulnerability poses a serious risk to data security, allowing attackers to execute unauthorized queries on the database remotely.
Recommendation
It is recommended to immediately update the system to the latest version and implement input data filtering to prevent SQL injection.
Original NVD description (English source)
A vulnerability classified as critical was found in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file manage_prices.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230347.