Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-13345 1 Oretnom23 1 Train Station Ticketing System 2025-11-19 6.3 Medium
A security vulnerability has been detected in SourceCodester Train Station Ticketing System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_ticket. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-13344 2 Oretnom23, Sourcecodester 2 Train Station Ticketing System, Train Station Ticketing System 2025-11-19 7.3 High
A weakness has been identified in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.