CVE-2023-31934

Name of the Vulnerable Software and Affected Versions Rail Pass Management System version 1.0

Description A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via the adminname parameter of "admin-profile.php".

Recommendations For Rail Pass Management System version 1.0, update the software to a version that fixes this issue, or as a temporary workaround, consider restricting access to the "admin-profile.php" endpoint to minimize the risk of exploitation. Avoid using the adminname parameter in the affected endpoint until the issue is resolved.