CVE-2023-2865

The CVE-2023-2865 entry concerns SourceCodester Theme Park Ticketing System 1.0. A SQL injection exists in the GET Parameter Handler’s print_ticket.php, caused by unsafely handling the id argument. The vulnerability is exploitable remotely, with public disclosure cited across sources (VDB-229821)...

CVE-2023-2865 SourceCodester Theme Park Ticketing System GET Parameter print_ticket.php sql injection

A vulnerability was found in SourceCodester Theme Park Ticketing System 1.0. It has been classified as critical. This affects an unknown part of the file printticket.php of the component GET Parameter Handler. The manipulation of the argument id leads to sql injection. It is possible to initiate...