CVE-2023-24199

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at deleteticket.php...

CVE-2023-24199

Raffle Draw System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at deleteticket.php...

CVE-2023-24200

CVE-2023-24200 affects Raffle Draw System v1.0. The vulnerability is a SQL injection via the id parameter in save_ticket.php, with affected component/entry point identified in multiple sources. According to CVSS 3.1 metrics, it is a CRITICAL (9.8) impact across confidentiality, integrity, and ava...

CVE-2023-24198

CVE-2023-24198 affects Raffle Draw System v1.0 through multiple SQL injection flaws in save_winner.php, exploitable via the ticket_id and draw parameters. The underlying cause is unsafe SQL construction for these inputs, leading to potential data disclosure, modification, or denial of service (pe...