Approved changes feed: RSS · Atom

cpe:2.3:a:oretnom23:train_station_ticketing_system:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorOretnom23 (bb7583fb-f029-599f-a8a3-33d64769aa1f)
ProductTrain Station Ticketing System (5eee0f67-9244-593e-803f-1b2849e14e77)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-13347 vulnerable 2026-06-08 07:04:32.031088 SourceCodester Train Station Ticketing System ajax.php sql injection
MEDIUM (6.3)
A flaw has been found in SourceCodester Train Station Ticketing System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=save_user. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.
Published: 2025-11-18T13:02:05.198Z
Updated: 2025-11-18T20:21:19.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13346 vulnerable 2026-06-08 07:04:32.030534 SourceCodester Train Station Ticketing System ajax.php sql injection
MEDIUM (6.3)
A vulnerability was detected in SourceCodester Train Station Ticketing System 1.0. This affects an unknown part of the file /ajax.php?action=save_station. Performing manipulation of the argument id/station results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
Published: 2025-11-18T12:32:06.129Z
Updated: 2025-11-18T20:24:38.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13345 vulnerable 2026-06-08 07:04:32.030030 SourceCodester Train Station Ticketing System ajax.php sql injection
MEDIUM (6.3)
A security vulnerability has been detected in SourceCodester Train Station Ticketing System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_ticket. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Published: 2025-11-18T12:02:08.105Z
Updated: 2025-11-18T18:23:48.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13344 vulnerable 2026-06-08 07:04:32.029470 SourceCodester Train Station Ticketing System ajax.php sql injection
HIGH (7.3)
A weakness has been identified in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
Published: 2025-11-18T12:02:05.989Z
Updated: 2025-11-18T21:32:29.790Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.