Lucene search
HistoryJan 06, 2023 - 3:15 a.m.
CVE-2022-40049
sql injection
theme park ticketing system
sensitive information
remote attackers
cve-2022-40049
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.0%
SQL injection vulnerability in sourcecodester Theme Park Ticketing System 1.0 allows remote attackers to view sensitive information via the id parameter to the /tpts/manage_user.php page.
Affected configurations
Node
theme_park_ticketing_system_projecttheme_park_ticketing_systemMatch1.0
Related
prion
prion
Sql injection
2023-01-06 03:15:00
cvelist
cvelist
CVE-2022-40049
2023-01-06 00:00:00
cve
cve
CVE-2022-40049
2023-01-06 03:15:08
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
7.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
50.0%
Related for NVD:CVE-2022-40049