CVE-2022-3774

A vulnerability was found in SourceCodester Train Scheduler App 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /train_scheduler_app/?action=delete. The manipulation of the argument id leads to improper control of resource identifiers. The attack may be launched remotely. The identifier of this vulnerability is VDB-212504.

• CWE-99

• http://packetstormsecurity.com/files/169604/Train-Scheduler-App-1.0-Insecure-Direct-Object-Reference.htmlExploit, Third Party Advisory
• https://github.com/rohit0x5/poc/blob/main/idorBroken Link, Third Party Advisory
• https://vuldb.com/?id.212504Third Party Advisory
• http://packetstormsecurity.com/files/169604/Train-Scheduler-App-1.0-Insecure-Direct-Object-Reference.htmlExploit, Third Party Advisory
• https://github.com/rohit0x5/poc/blob/main/idorBroken Link, Third Party Advisory
• https://vuldb.com/?id.212504Third Party Advisory

Published

Oct 31, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-37721PyroCMS 3.9 is vulnerable to a stored Cross Site Scripting (…9
• CVE-2022-37724Project Wonder WebObjects 1.0 through 5.4.3 is vulnerable to…6.1
• CVE-2022-3773Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-37730In ftcms 2.1, there is a Cross Site Request Forgery (CSRF) v…8.8
• CVE-2022-37731ftcms 2.1 poster.PHP has a XSS vulnerability. The attacker i…6.1
• CVE-2022-37734graphql-java before19.0 is vulnerable to Denial of Service. …7.5
• CVE-2022-3775When rendering certain unicode sequences, grub2's font code …7.1
• CVE-2022-3776The Restaurant Menu – Food Ordering System – Table Reservati…8.8
• CVE-2022-37767Pebble Templates 3.1.5 allows attackers to bypass a protecti…9.8
• CVE-2022-37768libjpeg commit 281daa9 was discovered to contain an infinite…7.5
• CVE-2022-37769libjpeg commit 281daa9 was discovered to contain a segmentat…6.5
• CVE-2022-37770libjpeg commit 281daa9 was discovered to contain a segmentat…6.5