584 matches found
Raffle Draw System SQL注入漏洞
Raffle Draw System is a simple lottery system by Carlo Montero Personal Developer. A security vulnerability exists in Raffle Draw System that stems from an SQL injection issue in the id parameter of the getticket.php page...
CVE-2023-24200
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at saveticket.php...
CVE-2023-24198
Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...
CVE-2023-24199
CVE-2023-24199 affects Raffle Draw System v1.0 with a SQL injection vulnerability in the delete_ticket.php page through the id parameter. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack-vector, no user interaction, and no privileges required; impact to confidentiality, integrity, a...
CVE-2023-24198: Improper Neutralization of Special Elements used in an SQL Command
Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...
CVE-2023-24201
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at getticket.php...
CVE-2023-24202
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...
Raffle Draw System SQL注入漏洞
Raffle Draw System is a simple lottery system by Carlo Montero Personal Developer. A security vulnerability exists in Raffle Draw System that stems from an SQL injection issue in the id parameter of the deleteticket.php page...
CVE-2023-24202
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...
CVE-2023-24201
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at getticket.php...
CVE-2023-24200
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at saveticket.php...
CVE-2023-24202: Unrestricted Upload of File with Dangerous Type
Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...
Raffle Draw System SQL注入漏洞
Raffle Draw System is a simple draw system by Carlo Montero, a personal developer. A security vulnerability exists in Raffle Draw System, which stems from an SQL injection issue in the ticketid and draw parameters of the savewinner.php page...
CVE-2023-24199: Improper Neutralization of Special Elements used in an SQL Command
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at deleteticket.php...
CVE-2023-24202
CVE-2023-24202 affects Raffle Draw System v1.0, whose vulnerability is a local file inclusion (LFI) via the page parameter in index.php. The cited sources consistently describe an LFI issue that could allow an attacker to access or include local files, potentially leading to data exposure or code...
CVE-2023-24200: Improper Neutralization of Special Elements used in an SQL Command
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at saveticket.php...
CVE-2023-24199
Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at deleteticket.php...
CVE-2023-24200
CVE-2023-24200 affects Raffle Draw System v1.0. The vulnerability is a SQL injection via the id parameter in save_ticket.php, with affected component/entry point identified in multiple sources. According to CVSS 3.1 metrics, it is a CRITICAL (9.8) impact across confidentiality, integrity, and ava...
CVE-2023-24201
CVE-2023-24201 affects Raffle Draw System v1.0. The connected documents confirm a SQL injection vulnerability exploitable via the id parameter in get_ticket.php, leading to high-severity impact across confidentiality, integrity, and availability (CVSS v3.1: 9.8, NETWORK, NONE/LOW conditions). The...