Skip to content
OpenAdvisories
Medium · 5.4 CVE-2022-3774 EUVD-2022-43124GHSA-phm7-hv7v-cqqr

SourceCodester Train Scheduler App resource injection

Published Oct 31, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /train_scheduler_app/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may be launched remotely. The identifier of this vulnerability is VDB-212504.

Affected products

VendorProductAffectedFixed
SourceCodester Train Scheduler App 1.0 —

References