Design/Logic Flaw

Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...

Sql injection

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...

Sql injection

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at deleteticket.php...

Sql injection

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at saveticket.php...

Raffle Draw System SQL注入漏洞

Raffle Draw System is a simple lottery system by Carlo Montero Personal Developer. A security vulnerability exists in Raffle Draw System that stems from an SQL injection issue in the id parameter of the deleteticket.php page...

Raffle Draw System SQL注入漏洞

Raffle Draw System is a simple lottery system by Carlo Montero Personal Developer. A security vulnerability exists in Raffle Draw System that stems from an SQL injection issue in the id parameter of the saveticket.php page...

Raffle Draw System SQL注入漏洞

Raffle Draw System is a simple lottery system by Carlo Montero Personal Developer. A security vulnerability exists in Raffle Draw System that stems from an SQL injection issue in the id parameter of the getticket.php page...

CVE-2023-24201: Improper Neutralization of Special Elements used in an SQL Command

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at getticket.php...

CVE-2023-24202: Unrestricted Upload of File with Dangerous Type

Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...

CVE-2023-24198

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...

Raffle Draw System SQL注入漏洞

Raffle Draw System is a simple draw system by Carlo Montero, a personal developer. A security vulnerability exists in Raffle Draw System, which stems from an SQL injection issue in the ticketid and draw parameters of the savewinner.php page...

CVE-2023-24202

Raffle Draw System v1.0 was discovered to contain a local file inclusion vulnerability via the page parameter in index.php...

CVE-2023-24199

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at deleteticket.php...

CVE-2023-24198

Raffle Draw System v1.0 was discovered to contain multiple SQL injection vulnerabilities at savewinner.php via the ticketid and draw parameters...

CVE-2023-24199

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at deleteticket.php...

CVE-2023-24200

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at saveticket.php...

CVE-2023-24201

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at getticket.php...

CVE-2023-24199

CVE-2023-24199 affects Raffle Draw System v1.0 with a SQL injection vulnerability in the delete_ticket.php page through the id parameter. The CVSS v3.1 base score is 9.8 (CRITICAL) with network attack-vector, no user interaction, and no privileges required; impact to confidentiality, integrity, a...

PT-2023-19477

Name of the Vulnerable Software and Affected Versions Raffle Draw System version 1.0 Description The issue is related to a local file inclusion vulnerability. This vulnerability can be exploited via the page parameter in the "index.php" endpoint. Recommendations For Raffle Draw System version 1.0...

PT-2023-19472

Name of the Vulnerable Software and Affected Versions Raffle Draw System version 1.0 Description The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities are located at the "save winner.php" endpoint via the ticket id and draw parameters. Recommendations For Raffle Draw...