SourceCodester Train Station Ticketing System 1.0 contains a security vulnerability in the /ajax.php?action=save_ticket endpoint that allows remote attackers to perform SQL injection. This vulnerability can lead to unauthorized data access and modification. The vulnerability has a CVSS score of 6.3 (medium severity) and public exploit code has been disclosed.