CVE-2026-5554: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in code-projects Concert Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file /ConcertTicketReservationSystem-master/processsearch.php of the component Parameter Handler. Performing a manipulation of the argument...

CVE-2023-44163

CVE-2023-44163 describes a SQL Injection risk in a web application where the search parameter of the process_search.php resource does not validate received characters, sending them unfiltered to the database. The issue enables unauthenticated access with potential impact to confidentiality, integ...

CVE-2023-44163: Improper Neutralization of Special Elements used in an SQL Command

The 'search' parameter of the processsearch.php resource does not validate the characters received and they are sent unfiltered to the database...