CVE:CVE-2023-31934
CNNVD:CNNVD-202307-2240
Rail Pass Management System是一个通票管理系统。
Rail Pass Management System v.1.0版本存在跨站脚本漏洞，该漏洞源于允许远程攻击者通过 admin-profile.php 的 adminname 参数获取敏感信息。
solution:Upgrade rail_pass_management_system_project rail_pass_management_system to a higher version than 1.0,and avoid the version 1.0