CVE-2024-7814
15.08.2024, 04:15
A vulnerability, which was classified as problematic, was found in CodeAstro Online Railway Reservation System 1.0. Affected is an unknown function of the file /admin/admin-add-employee.php of the component Add Employee Page. The manipulation of the argument emp_fname /emp_lname /emp_nat_idno/emp_addr leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
| Vendor | Product | Version |
|---|---|---|
| online_railway_reservation_system_project | online_railway_reservation_system | 1.0 |
𝑥
= Vulnerable software versions