CVE-2025-13347

A flaw has been found in SourceCodester Train Station Ticketing System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=save_user. Executing manipulation of the argument Username can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

• CWE-74
• CWE-89

• https://github.com/puppytgyh/-CVE/issues/17Exploit, Issue Tracking
• https://vuldb.com/?ctiid.332765Permissions Required, VDB Entry
• https://vuldb.com/?id.332765Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.691945Third Party Advisory, VDB Entry
• https://www.sourcecodester.com/Product

Published

Nov 18, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1334IBM QRadar Suite Software 1.10.12.0 through 1.11.2.0 and IBM…4
• CVE-2025-13342The Frontend Admin by DynamiApps plugin for WordPress is vul…9.8
• CVE-2025-13343A security flaw has been discovered in SourceCodester Interv…5.4
• CVE-2025-13344A weakness has been identified in SourceCodester Train Stati…9.8
• CVE-2025-13345A security vulnerability has been detected in SourceCodester…8.8
• CVE-2025-13346A vulnerability was detected in SourceCodester Train Station…8.8
• CVE-2025-13348An improper access control vulnerability exists in ASUS Secu…8.5
• CVE-2025-13349A vulnerability has been found in SourceCodester Student Gra…5.4
• CVE-2025-1335A vulnerability, which was classified as problematic, was fo…8.1
• CVE-2025-13350Ubuntu Linux 6.8 GA retains the legacy AF_UNIX garbage colle…7.1
• CVE-2025-13352Mattermost versions 10.11.x <= 10.11.6 and Mattermost GitHub…3
• CVE-2025-13353In gokey versions <0.2.0, a flaw in the seed decryption log…5.5