https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-7912.htmlhttps://patchthecve.com/cve/CVE-2024-7912.htmlWed, 17 Jun 2026 08:21:10 +0000MEDIUM 5.3: A vulnerability was found in CodeAstro Online Railway Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/assets/. The manipulation leads to exposure of information through directory listing. The attack can be initiated remotely. Thhttps://patchthecve.com/cve/CVE-2024-7910.htmlhttps://patchthecve.com/cve/CVE-2024-7910.htmlWed, 17 Jun 2026 08:21:10 +0000MEDIUM 4.7: A vulnerability was found in CodeAstro Online Railway Reservation System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/emp-profile-avatar.php of the component Profile Photo Update Handler. The manipulation leads to unrestricted upload. The athttps://patchthecve.com/cve/CVE-2024-7815.htmlhttps://patchthecve.com/cve/CVE-2024-7815.htmlWed, 17 Jun 2026 08:20:58 +0000LOW 2.4: A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-update-employee.php of the component Update Employee Page. The manipulation of the argument emp_fname /https://patchthecve.com/cve/CVE-2024-7814.htmlhttps://patchthecve.com/cve/CVE-2024-7814.htmlWed, 17 Jun 2026 08:20:57 +0000LOW 2.4: A vulnerability, which was classified as problematic, was found in CodeAstro Online Railway Reservation System 1.0. Affected is an unknown function of the file /admin/admin-add-employee.php of the component Add Employee Page. The manipulation of the argument emp_fname /emp_lname /emp_nat_idno/emp_adhttps://patchthecve.com/cve/CVE-2024-0782.htmlhttps://patchthecve.com/cve/CVE-2024-0782.htmlWed, 17 Jun 2026 06:54:16 +0000LOW 3.5: A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file pass-profile.php. The manipulation of the argument First Name/Last Name/User Name leads to cross site scripting. The attack can be init