CVE:CVE-2023-31937
CNNVD:CNNVD-202307-2232
Rail Pass Management System是一个通票管理系统。
Rail Pass Management System v.1.0版本存在安全漏洞，该漏洞源于允许远程攻击者通过 edit-cateogry-detail.php 文件的 editid 参数执行任意代码。
solution:Upgrade rail_pass_management_system_project rail_pass_management_system to a higher version than 1.0,and avoid the version 1.0